VIP AuthHub - Multiple Passkey allowed from the same Device

Products

• Symantec Identity Security Platform - IDSP (formerly VIP Authentication Hub)

Issue/Introduction

When enrolling Passkey from mobile application, users are able to create multiple passkeys from the same device.

Instead of updating the existing passkey, the system is creating new passkeys for each enrolment attempt on the same device.

Environment

SSP 3.4.1

Cause

The exclude credential option in native passkey registration APIs is available from iOS version 17.4 onwards.

Currently our SDK supports minimum version as iOS 15 hence even if this functionality is added, it will be available on the devices running on iOS 17.4 and above.

Resolution

New  AuthHub iOS SDK v3.1.2 has been released to include the support for excludeCredential (Passkey registration will fail on the device if passkey already exist for userId + domain on the device).

As noted above, this will work on devices with IOS 17.4 and above