Changes between Version 3 and Version 4 of net.sf.basedb.webauthn/using

Timestamp:

Aug 15, 2022, 8:49:25 AM (21 months ago)

Author:

Nicklas Nordborg

Comment:

Login instructions for password-less login

net.sf.basedb.webauthn/using

@@ -3 +3 @@
 == Logging in ==
 
-Before it is possible to login with a !WebAuthn Security Key the server administrator need to register the key and connect it to the user account. It is not possible for users to register the key by themselves.
+Before it is possible to login with a !WebAuthn Security Key the server administrator need to register the key and connect it to the user account (see below). It is not possible for users to register the key by themselves. Depending on the capabilities of the security key, the administrator may enable password-less authentication.
+
+
+=== Basic !WebAuthn ===
+
+In the basic mode, the user has to specify the login and password and then verify the login by touching the security key.
 
  1. Start by entering the '''Login''' and '''Password''' information in the form.
@@ -19 +24 @@
 }}}
 
-=== Newer Firefox, Chrome and Edge 101 on Windows 10 ===
+==== Newer Firefox, Chrome and Edge 101 on Windows 10 ====
 
 || '''Step 3: Prompting you for inserting a key''' || '''Step 4: Prompting you for touching the key''' ||
@@ -25 +30 @@
 
 
-=== Older Firefox ===
+==== Older Firefox ====
 
 || '''Step 3 and 4: Prompting you for inserting and touching the key''' ||
 || [[Image(older-firefox.png)]] ||
 
+
+=== Password-less authentication ===
+
+If the security key supports it, the administrator may enable password-less authentication. For example, this is possible with the newer !YubiKey 5 models. This mode also requires that the security key is protected with a PIN.
+
+ 1. Start by selecting the '''!WebAuthn (password-less)''' login metod
+ 2. Click on the '''Login''' button.
+ 3. The browser should ask you to insert the security into an USB port (unless it is already inserted).
+ 4. Enter the PIN and press the button on the security key (do not click on the '''Cancel''' button).
+ 5. You should now be logged in.
+
+|| '''Step 1: Password-less login''' || '''Step 4: Enter a PIN''' ||
+|| [[Image(password-less-login.png)]] || [[Image(enter-ping.png)]] ||
 
 == Assigning security keys to users ==