Integrating the FIDO SDK with TrustX

Appkeys utilize the FIDO Universal Authentication Framework (UAF) specification to provide a passwordless solution to registration and authentication where an identity is bound to only one device or biometric profile without the need for passwords or QR codes.

To take full advantage of Appkeys in TrustX, it is necessary to integrate the FIDO SDK with the Trust SDK to

1. Store Appkeys on a device for stronger security than the web-based alternative.
2. Capture biometrics (face, fingerprint) to complete biometric-bound registration and authentication flows with Appkeys.

This document will describe the configuration steps to include the FIDO SDK with your iOS and Android application.

iOS Configuration

Dependencies

Add your GitHub account to Xcode and add the xAuth FIDO SDK as a Swift Package.

It is not required to include every FIDO package as currently only the DaonFIDOSDK library is required.

Example:

It is then possible to add the FIDO SDK dependencies to the Trust SDK.

Example:

import DaonTrustSDKAuthenticationProcessor

​

// Add the authentication process

let authenticationProcessor = try AuthenticationProcessor.Builder()

                .enableDebugLogs(true)

                .enableLocationUsage(false)

                .enableSilentBiometricRegistration(false)

                .setBiometricRegistrationReason("Registration Reason")

                .setBiometricAuthenticationReason("Authentication Reason")

                .setPushToken(token)

                .build()

sdk.addAuthenticationProcessor(authenticationProcessor)

Android Configuration

Dependencies

For Android, the xAuth FIDO SDK is provided as a Maven repository. To incorporate the FIDO SDK, add the following dependencies to your build.gradle file.

implementation 'com.daon.sdk:fido-kt:4.8.142'

implementation 'com.daon.sdk:fido-device:4.8.5'

implementation 'com.daon.sdk:fido-crypto:4.8.7'

implementation 'com.daon.sdk:fido-auth-common:4.8.35'

implementation 'com.daon.sdk:fido-auth-authenticator:4.8.35'

The FidoManager package can be imported by adding com.daon.trustsdk.FidoManager to your project.

Example:

import com.daon.trustsdk.FidoManager

​

        val fidoManager = FidoManager.Builder()

             .enableSilentBiometricRegistration(false)

            .invalidateFingerEnrollment(true)

            .enableDebugLogs(true)

            .enableExtendedErrorLogs(true)

            .build(this)

        daonTrustSdk.addFidoManager(fidoManager)

##