IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  FIDO2 Enable/Disable

    Posted 10/19/19 09:15 AM
    ​Hello all,

    I am testing FIDO2 functionality with ISAM 9.0.7 and I can successfully register, test and delete authenticator by following Shane Weeden's tutorial "FIDO2 in less than 15 minutes with ISAM 9.0.7" on the ISAM page device_selection.html

    However, unlike the deprecated U2F, I am not able to test the enabling and disabling of the FIDO2 authenticator. The option to enable/disable is not clickable on the page.

    I am working on a portal where an authenticated ISAM user can enable/disable his/her FIDO2 authenticator. For this reason, I am looking for a way to enable/disable it.

    I have explored that there is a parameter "enabled":"true" in the JSON response when I query the authenticator via GET Request on the FIDO2 registrations URL. Is there a way we can toggle this status of the FIDO2 authenticator, for example by sending POST/PUT request accordingly?

    Best regards,

    ------------------------------
    Jahanzaib Sarwar
    ------------------------------


  • 2.  RE: FIDO2 Enable/Disable

    Posted 10/22/19 01:27 AM
    Hello,

    Just to update, IBM Support says that this functionality is not available in ISAM for FIDO devices. But I am wondering, if other operations are there for FIDO devices, why isn't the enable/disable there?

    Regards,

    ------------------------------
    Jahanzaib Sarwar
    ------------------------------



Related Content