Support for macOS TouchID in Okta for FIDO/WebAuthn MFA

Versent / saml2aws

CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP

https://github.com/Versent/saml2aws

MIT License

2.07k stars 563 forks source link

Open alsmola opened 2 years ago

alsmola commented 2 years ago

The current Okta WebAuthN support in saml2aws relies on https://github.com/marshallbrekka/go-u2fhost which only finds USB-based hardware authenticators.

Using TouchID appears to be implemented in gimme-aws-creds - https://github.com/Nike-Inc/gimme-aws-creds/pull/252 - but not exactly sure what Go library would help us support "Virtual CTAP2 device" in the same way they use https://github.com/dany74q/ctap-keyring-device.

jackivanov commented 1 year ago

Any updates?

saurabhnemade commented 8 months ago

Any updates on this? It's really annoying to pickup phone and approve requests when you can just touch fingerprint on touchid.

genevera commented 8 months ago

Looks like there's a virtual FIDO device written in golang: https://github.com/bulwarkid/virtual-fido