Web trial: Configure your tenant

After downloading the App SDK for Web, you can proceed with configuring your cloud tenant.

Specify the RP ID for FIDO2/WebAuthn

1. On Step 4 of the DigipassONE Authenticate Cloud portal, click Configure your tenant.

   

2. You will see a server administration page. Click Configuration and choose Authentication Methods from the menu.

   

3. On the Authentication Methods screen, click FIDO2/WebAuthn and change the RP ID to localhost. This will allow the tutorial web app to use a Local Identity Provider (IdP) for the initial sign in.¹

   

¹ QR code and cross-device sign-in are supported by the Web Tutorial App provided that the RP ID is a public domain.

Allow the Tutorial App for web to access your tenant

Add to the web client origin allow list

1. Open the Configuration menu and click on API Server.

   

2. You will be brought to the API Server screen. Click Main.

   

3. Click Add an origin, enter http://localhost:8080 and check.

   

Add to the trusted facets list

1. Open the Configuration menu and click on Apps.

   

2. You will be brought to the Apps screen. Click on Add App.

   

3. Choose Browser and click Add.

   

4. In the App window, enter the following details:

   • Package Name/URL: http://localhost:8080/gwtutorial/

   • App Name: Tutorial Web App

   • Facet ID: FIDO2/WebAuthn

   • FIDO2 Facet ID: http://localhost:8080

   • Adaptive Ruleset: tutorial

     

5. Click Save.

6. Tutorial Web App should now appear in the Apps page with the details you provided.

Access and record the JWT issuer and signing key

A unique JWT issuer and signing key was generated with your tenant. You will need this information when you enable the Web Tutorial App to communicate with the cloud.

1. Open the Configuration menu and click on API Server.

   

2. You will be brought to the API Server screen. Expand External Authentication Plugins and click the modify icon in the JWT Authentication Method row.

   

3. You should see the code that enables the JWT Authentication. Look for the k and issuer keys and record their values:

   

Please contact digipassone-trial@onespan.com if you are unable to complete these steps.