Enabling TouchID for U2F FIDO authentication

%3CLINGO-SUB%20id%3D%22lingo-sub-1139952%22%20slang%3D%22en-US%22%3EEnabling%20TouchID%20for%20U2F%20FIDO%20authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1139952%22%20slang%3D%22en-US%22%3E%3CP%3EGoogle%20Chrome%20is%20able%20to%20access%20TouchID%20to%20complete%20WebAuthN%20FIDO%20authentication.%20The%20prompt%20looks%20like%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20450px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F168102i5DE4A2659626669C%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Chrome-TouchID-FIDO.png%22%20title%3D%22Chrome-TouchID-FIDO.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EIn%20Microsoft%20Edge%2C%20there%20is%20no%20prompt%20for%20TouchID%20for%20FIDO%20webauthn%3C%2FP%3E%3CPRE%3EMicrosoft%20Edge%20Version%2080.0.361.33%20(Official%20build)%20Beta%20(64-bit)%3CBR%20%2F%3EMozilla%2F5.0%20(Macintosh%3B%20Intel%20Mac%20OS%20X%2010_14_6)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F80.0.3987.53%20Safari%2F537.36%20Edg%2F80.0.361.33%3C%2FPRE%3E%3CDIV%20class%3D%22p-rich_text_section%22%3EThe%20debug%20console%20shows%3A%3C%2FDIV%3E%3CPRE%3E%5B18220%3A775%3A0129%2F121549.155217%3AERROR%3Adevice_event_log_impl.cc(162)%5D%20%5B12%3A15%3A49.155%5D%20FIDO%3A%20touch_id_context.mm%3A94%20Touch%20ID%20unavailable%20because%20keychain-access-group%20entitlement%20is%20missing%20or%20incorrect%26nbsp%3B%3C%2FPRE%3E%3CP%3E%26nbsp%3BIs%20there%20is%20way%20to%20add%20the%20missing%26nbsp%3Bkeychain-access-group%20entitlement%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1140059%22%20slang%3D%22en-US%22%3ERe%3A%20Enabling%20TouchID%20for%20U2F%20FIDO%20authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1140059%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3Ethere%20are%20flags%20you%20can%20try%20to%20enable%20(preferably%20using%20Canary%20channel%20that%20has%20the%20most%20features)%3CBR%20%2F%3E%3CBR%20%2F%3Ein%20edge%3A%2F%2Fflags%2F%3CBR%20%2F%3Ein%20the%20search%20bar%20type%20%22auth%22%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Google Chrome is able to access TouchID to complete WebAuthN FIDO authentication. The prompt looks like:

Chrome-TouchID-FIDO.png

In Microsoft Edge, there is no prompt for TouchID for FIDO webauthn

Microsoft Edge Version 80.0.361.33 (Official build) Beta (64-bit)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.53 Safari/537.36 Edg/80.0.361.33
The debug console shows:
[18220:775:0129/121549.155217:ERROR:device_event_log_impl.cc(162)] [12:15:49.155] FIDO: touch_id_context.mm:94 Touch ID unavailable because keychain-access-group entitlement is missing or incorrect 

 Is there is way to add the missing keychain-access-group entitlement?

1 Reply
Hi,
there are flags you can try to enable (preferably using Canary channel that has the most features)

in edge://flags/
in the search bar type "auth"