BlockID Passwordless Login:

The BlockID Passwordless Authentication tree let Administrators and End Users to login passwordless to ForgeRock Access manager application OR any applications protected by Access manager. Passwordless login will be performed by Scanning a QR code rendered by 1Kosmos BlockID platform The BlockID Passwordless Authentication tree let Administrators and End Users to login passwordless to ForgeRock Access manager administrative console OR any applications protected by Access manager.

Passwordless login will include

a) Scanning a QR code rendered by 1Kosmos BlockID platform

b) Providing biometric authentication (FaceID, LiveID) on BlockID Mobile App and user consent

Usage:

To enable BlockID Passwordless authentication

• Download the code from the github (URL: https://github.com/1Kosmos/blockid_forgerock_plugin)

• Please obtain a license and tenant details from 1Kosmos sales team (sales@1kosmos.com)

• Update the below properties in BlockIDPasswordless/src/main/resources/application.properties with your tenant & license details

  uwl.dns.url=<<to_be_substituted>>

  uwl.license.key=<<to_be_substituted>>

  uwl.community.name=<<to_be_substituted>>

• You can import the project as maven project in Eclipse / IntelliJ

• Compile and deploy the BlockIDPasswordless springboot application in any of the application container

• Please validate the BlockIDPasswordless sprint boot application status by performing GET operation on BlockIDPasswordless/healthcheck REST endpoint through a REST Client (such as POSTMAN)

• Login to ForegeRock Access Manager administrative console

• Create a "Decision node script for authentication trees" type javascript under Realm --> Scripts section

• Modify "BlockID Passwordless Login Scripted Decision Node.js" contents with <<HOST_NAME>> and << PORT >> values and place the updated contents in the "Decision node script for authentication trees" script

• Create a passwordless Authentication tree

  Example Flow:

  

• Use the created "Decision node script for authentication trees" script for scripted decision node. Add "true" and "false" as scripted decision outcomes

  

• Save the Authentication tree and invoke the authenticaion tree URL