I'm new to FIDO (Fast IDentity Online), and want to add FIDO UAF (Universal Authentication Framework) support to my website. I've few queries:

  1. Suppose, I've built my own FIDO Client. Is there any test server where I can test my FIDO Client, or do I have to build my own FIDO Server?

  2. How does a FIDO server confirms whether FIDO client is installed on user's device? How do they communicate? Do they use a specific port on user's device to communicate?

I'm sorry if these questions seem trivial, but it would help me understand the UAF architecture better.

  1. You can test your client with FIDO UAF Conformance Testing tools (https://fidoalliance.org/certification/conformance/), you need to register first. You can also test with your own server, eBay has an open source UAF server on Github.

  2. I think the server will not know if an UAF client was installed unless the client sends an UAF request, however your client needs to match the policy within the UAF request. The communication between server and client is through HTTP. If you talked about the communication between client and authenticator, then you have implement ASM API

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.