Webauthn Device Management Widget
Definition
The Webauthn Device Management widget is used to manage the available device enrolled using Webauthn. They can be renamed/deleted.
It is a standalone widget that requires a host feature of type "self" or an object feature where the object is the current subject.
Typically used in a UI_FOR_OBJECT feature of type "self".
The user is presented with a list of available device which can be renamed or deleted.
Configuration
Tenant properties
The BUM service communicates with the Credential Gateway Service to list/update/delete the devices. The location and system account used to access this service must be configured as tenant properties (not settings).
Property name | Type | Description |
|---|---|---|
citadel.bum.cgw.tenants.<tenant>.backendBaseUrl |
| The base URL of the CGW backend service. |
citadel.bum.cgw.tenants.<tenant>.login |
| The login of the system account who will authenticate through basic auth on the CGW backend to perform CRUD operation |
citadel.bum.cgw.tenants.<tenant>.password |
| The password of the system account who will authenticate through basic auth on the CGW backend to perform CRUD operation |
Widget properties
When the widget is placed in a non-self feature it can manage the web authentication keys of any users in the scope of the feature. These features should hence be reserved for admin purpose.
Properties
Property name | Type | Description | Values (default value in bold) |
|---|---|---|---|
canDeleteDevices |
| The user is allowed to rename the device | true, false |
canRenameDevices |
| The user is allowed to delete the device | true, false |
canEnableDevices |
| The user can enable/disable the device (soft delete) | true, false |
Example
<widget id="webauthn-devices-management-widget" xsi:type="ctdbum:WebauthnDevicesManagementWidgetType">
<hidden>false</hidden>
<displayOptions>
<modalSize>SM</modalSize>
</displayOptions>
<config>
<bordered>false</bordered>
<title>true</title>
<canDeleteDevices>true</canDeleteDevices>
<canRenameDevices>true</canRenameDevices>
<canEnableDevices>true</canRenameDevices>
</config>
</widget>