Mobile Apps should support physical key SSO login
Our client is leveraging SSO with MFA, specifically using a hardware security key (YubiKey) for mobile authentication. We are able to verify that this works on a mobile phone using the web browser on the mobile phone (e.g. Chrome and Safari). However, when trying to login to the Mobile App - Mobile Framework 4.0 and Workplace, the MFA is not recognized.
This is because the Archibus browser used within the mobile app does not support webauthn, which is the technology that allows users to log into a wbsite using a hardware security key.
The Mobile Client and the Workplace app uses browser components provided by the device frameworks.
For iOS this is the WKWebView component WKWebView | Apple Developer Documentation .
For Android this is the WebView component WebView | Android Developers .
It would be great if Archibus mobile apps can support WebAuthn.
Tina
shared this idea
-
Michael Willette
commented
NOAA is the first to attempt to comply with this. The entire Federal government in the near future will have this as a requirement. It will be critical to support in the near future.