Orchestration SDKs

Preparing Advanced Identity Cloud or PingAM for FIDO in JavaScript

PingOne Advanced Identity Cloud PingAM JavaScript

Before enabling FIDO authentication in your JavaScript apps you must configure your authentication journeys for FIDO.

Configuring authentication journeys for FIDO on JavaScript

Authentication journeys for FIDO primarily use these nodes:

WebAuthn Registration Node

Handles the creation and storage of new passkeys.

WebAuthn Authentication Node

Manages the sign-in process by issuing and verifying challenges.

Learn more about creating authentication journeys for FIDO in Journeys for WebAuthn.

To prepare your authentication journeys to use FIDO with a JavaScript application, you need to configure each WebAuthn Registration node and WebAuthn Authentication node in your authentication journey to work with your JavaScript app.

You must use the same configuration values in each WebAuthn Registration node and WebAuthn Authentication node in the journey.

Any mismatches in configuration between these nodes will cause authentication to fail.
Each WebAuthn Registration node and WebAuthn Authentication node

  1. In Origin domains, enter the URL where you host your JavaScript app.

    For example, https://app.example.com.

    If you leave Origin domains empty, the server uses the origin of incoming requests as an accepted origin.
Each WebAuthn Registration node

  1. In Accepted signing algorithms, include one or more of ES256 and RS256.

  2. Ensure the Limit registrations option is not enabled.

Next steps

You can now proceed to Integrating FIDO auth journeys in JavaScript.