2.0 Authenticating to Web-Based Event with the U2F Method

Let us assume administrator of Reltic Data wants to authenticate users with the enrolled U2F method to the Search Card Portal.

This section explains the prerequisites, sequence of API calls, and sample request details to achieve this.

Prerequisites

Ensure to gather the following details before you execute any API call:

  • {{hostname}} indicates Advanced Authentication server IP address or host name.

  • {{endpoint_id}} indicates the unique device ID where the user authenticates.

  • endpoint_secret_hashindicates the value used to hide the plain text hash an endpoint secret and id.

  • salt indicates the technique required to hash the password.

  • event indicates the event name that is configured on the Administration Portal.

  • endpoint_session_id unique session ID that is generated when the endpoint session is created.

  • logon_process_id indicates the process ID to the given event. This is generated when you attempt to login to the event.

  • Ensure to create a chain with U2F method and associate that chain to the Search Card Portal.

  • Ensure Advanced Authentication Device Service is installed on the system from where you initiate API calls to perform U2F authentication.

    For more information, see Installing and Upgrading Device Service.

The administrator must execute the following APIs to authenticate users with the U2F method:

  1. Register an Endpoint

  2. Create a Session for the Endpoint

  3. Initiate Logon Process with the U2F Method

  4. Gather the Sign Request

  5. Forward Sign Requests to JSAPI

  6. Forward the Sign Response to Server

NOTE:Any text enclosed in double flower brackets {{ }} indicates defining or referencing variables. When you include variables in the request body, Postman or other API tool replaces variables with the respective values during the runtime.