LDAPWiki: Virtual Authenticator

Overview#

Virtual Authenticator (WebAuthN) is a software implementations of the WebAuthn Authenticator Model. Virtual Authenticators are stored in a Virtual Authenticator Database.

Virtual Authenticator Each stored Virtual Authenticator has the following properties:

authenticatorId - An non-null string made using up to 48 characters from the unreserved production defined in Appendix A of RFC 3986 that uniquely identifies the Virtual Authenticator.
protocol - The protocol the Virtual Authenticator speaks: one of "ctap1/u2f", "ctap2" or "ctap2_1" FIDO-CTAP.
transport - The AuthenticatorTransport simulated. If the transport is set to internal, the authenticator simulates Platform Authenticator attachment. Otherwise, it simulates Roaming Authenticator attachment.
hasResidentKey - If set to true the authenticator will support Client-side discoverable credentials.
hasUserVerification - If set to true, the authenticator supports user verification.
isUserConsenting - Determines the result of all user consent authorization gestures, and by extension, any test of user presence performed on the Virtual Authenticator. If set to true, a user consent will always be granted. If set to false, it will not be granted.
isUserVerified - Determines the result of User Verification performed on the Virtual Authenticator. If set to true, User Verification will always succeed. If set to false, it will fail. Note: This property has no effect if hasUserVerification is set to false.
extensions - A string array containing the extension identifiers supported by the Virtual Authenticator.

A Virtual authenticator MUST support all authenticator extensions present in its extensions array. It MUST NOT support any authenticator extension not present in its extensions array.

uvm - A UvmEntries array to be set as the authenticator extension output when processing the User Verification Method extension.

More Information#

There might be more information for this subject on one of the following:

[#1] - 11.2. Virtual Authenticators - based on information obtained 2020-11-25