Web Authentication

This section describes Microsoft Edge support for the Web Authentication API. The Microsoft Edge implementation of the Web Authentication API enables web applications to use Windows Hello biometrics and PINs for user authentication.

The early implementation of Web Authentication in Microsoft Edge has the following differences with official specification:

  • Microsoft Edge APIs are MS- prefixed.
  • Microsoft Edge does not yet support external credentials like USB keys or Bluetooth devices. The current API is limited to embedded credentials stored in the TPM.
  • The currently logged in Windows user account must be configured to support at least a PIN, and preferably face or fingerprint biometrics. This is to ensure that Windows can authenticate the access to the TPM.
  • Microsoft Edge does not support all of the options in the current specification draft, such as extensions or timeouts.

In this section

Topic Description

MSCredentials

Represents Web Authentication API functionality in Microsoft Edge

 

Webauthn.js polyfill

Windows Hello Test Drive sample

Server and client side Web Authentication sample