Yes, we are planning to add support for web authentication, but not sure if it will be this year or next. On 29 May 2018 at 09:16, Vlastimil Elias <velias(a)redhat.com <mailto:velias@redhat.com>> wrote: Hi, it looks like that Web Authentication API [1] is going to be a new standard widely adopted by browsers to improve web authentication security. It helps to prevent phishing attacks (as it automatically validates domain of the login page) and allows to use device's auth hardware (eg biometrics HW) to login into websites. Any plans to support it in Keycloak? More info in Google IO 2018 session and related blogpost [2] Thanks Vlastimil [1] https://www.w3.org/TR/webauthn/ <https://www.w3.org/TR/webauthn/> [2] https://developers.google.com/web/updates/2018/05/webauthn <https://developers.google.com/web/updates/2018/05/webauthn> -- Vlastimil Elias Principal Software Engineer, Middleware Engineering Services Red Hat _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-dev <https://lists.jboss.org/mailman/listinfo/keycloak-dev>

There was an interesting talk about that at Google i/o 2018 https://youtu.be/kGGMgEfSzMw Cheers, Thomas Vlastimil Elias <velias(a)redhat.com&gt; schrieb am Di., 29. Mai 2018, 11:24: > Great news, hopefully it will be sooner rather than later to keep > Keycloak at the edge of security and modern technologies ;-) > > Thanks > > Vl. > > > On 29.5.2018 09:31, Stian Thorgersen wrote: > > Yes, we are planning to add support for web authentication, but not > > sure if it will be this year or next. > > > > On 29 May 2018 at 09:16, Vlastimil Elias <velias(a)redhat.com > > <mailto:velias@redhat.com>> wrote: > > > > Hi, > > > > it looks like that Web Authentication API [1] is going to be a new > > standard widely adopted by browsers to improve web authentication > > security. > > > > It helps to prevent phishing attacks (as it automatically validates > > domain of the login page) and allows to use device's auth hardware > > (eg > > biometrics HW) to login into websites. > > > > Any plans to support it in Keycloak? > > > > More info in Google IO 2018 session and related blogpost [2] > > > > Thanks > > > > Vlastimil > > > > [1] https://www.w3.org/TR/webauthn/ <https://www.w3.org/TR/ > webauthn/> > > > > [2] https://developers.google.com/web/updates/2018/05/webauthn > > <https://developers.google.com/web/updates/2018/05/webauthn> > > > > -- > > Vlastimil Elias > > Principal Software Engineer, Middleware Engineering Services > > Red Hat > > > > _______________________________________________ > > keycloak-dev mailing list > > keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org> > > https://lists.jboss.org/mailman/listinfo/keycloak-dev > > <https://lists.jboss.org/mailman/listinfo/keycloak-dev> > > > > > > -- > Vlastimil Elias > Principal Software Engineer, Middleware Engineering Services > Red Hat > > _______________________________________________ > keycloak-dev mailing list > keycloak-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev >