How to add TouchID and security key authentication methods (ie. WebAuthn).

Loading

Skip to Navigation Skip to Main Content

Search

Search

Select Language

0D54z00009RXRLuCAPOkta Classic EngineAuthenticationAnswered2024-04-17T11:38:33.000Z2023-07-06T21:28:08.000Z2023-09-21T15:43:27.000Z

wkh7e (wkh7e) asked a question.

July 6, 2023 at 9:28 PM

How to add TouchID and security key authentication methods (ie. WebAuthn).

I want my users to be able to sign in using the WebAuthn protocol (Web Authentication), which would allow them to use TouchID or a security key (e.g yubikey) when signing in through an Okta sign-in portal. I went to the admin dashboard -> Security -> Authenticators. When I click on "Add authenticator", I dont see an option for WebAuthn nor TouchID. I do see an option for Yubikey, which I setup, and uploaded the seed files for my programmed Yubikey, but the option to sign in with a yubikey still doesnt appear in the portal, which is a separate issue.

So to summarize, how do you add TouchID is the first issue, and the second, why is the option to sign in with a yubikey still not showing up in the portal after ive added it as an authenticator (see screenshot). Please note, I am on the free trial version, and I still have 28 days left.

Image is not available

Authentication

Top Rated Answers

User16594883467582706479 (Customer Support Online Experience)
3 years ago
Hi, @wkh7e (wkh7e)

Thank you for posting on our Community page!

To answer your questions in order:

TouchID is already assigned, as far as I see in the screenshot (the biometrics part in Okta Verify). It needs to be activated on each device manually. Here is more info on it:https://help.okta.com/en-us/Content/Topics/Mobile/ov-admin-config.htm#Enable4
As for the Yubikey, it will not work on a trial tenant, as stated here: https://support.okta.com/help/s/question/0D54z00006wkxWoCAI/okta-dev-no-yubikey-option?language=en_US

Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Like or Select as Best on responses. Try it today.
_____________________________________________________________________________
Expand Post
Selected as Best

All Answers

User16594883467582706479 (Customer Support Online Experience)
3 years ago
Hi, @wkh7e (wkh7e)

Thank you for posting on our Community page!

To answer your questions in order:

TouchID is already assigned, as far as I see in the screenshot (the biometrics part in Okta Verify). It needs to be activated on each device manually. Here is more info on it:https://help.okta.com/en-us/Content/Topics/Mobile/ov-admin-config.htm#Enable4
As for the Yubikey, it will not work on a trial tenant, as stated here: https://support.okta.com/help/s/question/0D54z00006wkxWoCAI/okta-dev-no-yubikey-option?language=en_US

Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Like or Select as Best on responses. Try it today.
_____________________________________________________________________________
Expand Post
Selected as Best
wkh7e (wkh7e)
3 years ago
Okay, I was able to get touch id to work, thanks for the help. But now regarding the security key authentication method; the purpose of me doing all this is because I work on a browser called SigmaOS (sigmaos.com), and some of our users reported that Okta security key and touch id authentication weren't working. So I am trying to debug the issue from my end. Is it possible if I can get temporary access to a nontrial account so I can fix this issue happening in SigmaOS for our Okta users? Thanks a lot.
Expand Post
wkh7e (wkh7e)
3 years ago
Specifically, I want to test out the WebAuthn feature, as described in: https://help.okta.com/oie/en-us/Content/Topics/identity-engine/authenticators/configure-webauthn.htm
Expand Post
User16594883467582706479 (Customer Support Online Experience)
3 years ago
Hello, @wkh7e (wkh7e)

I would suggest you calling or opening a case with Support so they can get a better look at your configuration there.
Expand Post

This question is closed.

Recommended content

Forum

How do I tell WebAuthn security keys apart?

Forum

How to add Smart Card for authenticate

Forum

Adding authenticators?

Forum

Add an SSH key to somewhere in OKTA

Loading

How to add TouchID and security key authentication methods (ie. WebAuthn).