Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide passwordless example, or update 1.3.2. to be a passwordless example #1735

Open
GregBrimble opened this issue May 27, 2022 · 2 comments
Assignees
Labels
@Risk Items that are at risk for L3 type:editorial

Comments

@GregBrimble
Copy link

Hi, just a suggestion to help clarify the passwordless registration flow for people.

1.3.2. Registration Specifically with User-Verifying Platform Authenticator walks through a process of registering where a user provides a username, password, and uses a user-verifying platform authenticator.

6.2. Authenticator Taxonomy states:

User-verifying platform authenticators and first-factor roaming authenticators enable passwordless multi-factor authentication. In addition to the proof of possession of the credential private key, these authenticators support user verification as a second authentication factor, typically a PIN or biometric recognition. The authenticator can thus act as two kinds of authentication factor, which enables multi-factor authentication while eliminating the need to share a password with the Relying Party.

To me, 1.3.2's example could be improved by not also providing a password, or instead, a new example was created to specifically walk through a passwordless flow.

More than happy to put up a PR to make these changes if you're interested in either. Just let me know!

@timcappalli
Copy link
Member

This can be addressed as part of #1720

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
@Risk Items that are at risk for L3 type:editorial
Projects
None yet
Development

No branches or pull requests

6 participants
@emlun @plehegar @timcappalli @nadalin @GregBrimble and others