POST /webauthn-registration/api/v1/activate

Activates a preregistered WebAuthn Factor. As part of this operation, Okta first decrypts and verifies the Factor PIN and enrollment data sent by the fulfillment provider.

Servers

Request headers

Name Type Required Description
Content-Type String Yes The media type of the request body.

Default value: "application/json"

Request body fields

Name Type Required Description
userId String No

ID of an existing Okta user

pinResponseJwe String No

Encrypted JWE of PIN response from the fulfillment provider

credResponses[] Array No

List of credential responses from the fulfillment provider

credResponses[].credResponseJWE String No

Encrypted JWE of credential response from the fulfillment provider

credResponses[].authenticatorEnrollmentId String No

ID for a WebAuthn Preregistration Factor in Okta

version String No

Firmware version of the YubiKey

serial String No

Serial number of the YubiKey

yubicoSigningJwks[] Array No

List of usable signing keys from Yubico (in JWKS format) used to verify the JWS inside the JWE

yubicoSigningJwks[].kty String Yes

The type of public key

Possible values:

  • "EC"
yubicoSigningJwks[].kid String Yes

The unique identifier of the key

yubicoSigningJwks[].crv String Yes

Possible values:

  • "P-384"
yubicoSigningJwks[].use String Yes

The intended use for the key. The ECKeyJWK is always enc because Okta uses it to encrypt requests to Yubico.

Possible values:

  • "enc"
yubicoSigningJwks[].x String Yes

The public x coordinate for the elliptic curve point

yubicoSigningJwks[].y String Yes

The public y coordinate for the elliptic curve point

fulfillmentProvider String No

Name of the fulfillment provider for the WebAuthn Preregistration Factor

Possible values:

  • "yubico"

How to start integrating

  1. Add HTTP Task to your workflow definition.
  2. Search for the API you want to integrate with and click on the name.
    • This loads the API reference documentation and prepares the Http request settings.
  3. Click Test request to test run your request to the API and see the API's response.