As an Instance Administrator, I want to configure a FIDO2 based hardware key verifier

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.3.6 CE GA7, 7.3.X, Master
• Component/s: Application Security > Multi-Factor Authentication
• Labels:
  • 7.4-dxp
  • 7.4-must
  • 7310-sp-pending
  • fc_20_10
  • fc_20_11
  • fc_20_12
  • fc_21_01
  • fc_21_02
  • has_acceptance_criteria
• Branch Version/s:
  7.3.x
• Backported to Branch:
  Committed
• Epic/Theme:
  • Authentication
• Epic Link: Multi-factor authentication additions
• Sprint: Iteration 45, Iteration 46, Iteration 47, Iteration 48, Iteration 49, Iteration 50, AppSec Iteration 51, AppSec Iteration 52, AppSec Iteration 53, AppSec Iteration 54, AppSec Iteration 55, AppSec Iteration 56

Description

Instance Administrators can setup a FIDO2 verifier in MFA that End users can configure and use as a verification step in their MFA process.

Acceptance Criteria

1. As an Instance Administrator, after enabling the MFA on instance level, I want to be able to configure a FIDO2 verifier on instance level which allows users to configure and use as a verification step in their MFA process.
2. As an Instance Administrator, I want to set where I want to have the configured FIDO2 verifier in the order of the configured verifiers.
3. As an Instance Administrator, I want to be able to see successful/unsuccessful login attempts with the configured FIDO verifier.
4. As an Instance Administrator, I want the End Users to be able to configure the FIDO2 verification step on their side and use that in their MFA process.

Doc

https://fidoalliance.org/fido2/
https://developers.yubico.com/FIDO2