OpenAM 14.6.5 WebAuthn Configuration

[rob3ds]

Setup OpenAM OOTB default configuration. Created realm and added / chained WebAuthn Registration and Authentication modules. Set WebAuthn Registration as Required and Authentication chain as requisite. These settings were based on some very dated online docs...

Problem: Receiving not authenticated error when using registration URI, but have not registered yubikey so I seem to have the cart in front of the horse.

Question: Are there any current / specific guidance on how to properly configure OpenAM 14.x to use WebAuthn modules?

Thanks,
Rob

[maximthomas]

Hello, sure https://github.com/OpenIdentityPlatform/OpenAM/wiki/How-to-Setup-WebAuthn-Authentication-in-OpenAM

[maximthomas]

Forgot to mention: WebAuthn works only with https sites or localhost by design

[rob3ds]

okay, back on this - I've moved to a new RHEL VM, new setup Tomcat 9, Java 8, Openam14.6.6 - default configuration/embedded setup; still not working by following https://www.openidentityplatform.org/blog/How-to-Setup-WebAuthn-Authentication-in-OpenAM; was curious if the embedded data store required configuration as noted by: https://openam-jp.github.io/WebAuthn/

[maximthomas]

Are you still getting the same error? Have you tried docker OpenAM distribution?

[rob3ds]

Thanks for the quick response - I will setup docker today. I've attached debug files; I am sure this is cockpit trouble on my side on the config
Configuration.txt
Entitlement.txt
IdRepo.txt
Session.txt
;

[rob3ds]

To answer your original question, a different error: An internal authentication error has occurred. this is with -DXUI.enabled=false.

When using https URL I receive error: An internal authentication error has occurred.

When running on localhost using URL: http://localhost:8080/openam/UI/Login?org=/3dexperience&service=webauthn-registration

I receive this response:

No configuration found.
Contact your system administrator.

Return to Login page

This project is licensed under the Common Development and Distribution License (CDDL).