Thales extensions for FIDO

The FIDO2 standard protocol defines an extensibility mechanism through optional elements of the WebAuthn message payload, which can be used to enrich the FIDO experience with additional features. Thales implements three proprietary extensions:

• The friendly name extension allows you to associate a user-friendly name with a credential. The use of this extension is optional.
• The transaction signature extension dynamically links a FIDO authentication to a specific transaction. The use of this extension is optional.
• The challenge token extension conveys contextual information about the attestation or assertion. This extension is automatically activated.

These extensions are:

• Independent: An application can use any of the extensions without affecting the others.
• Compatible with any FIDO2 authenticator: The extensions are not meant to be processed by authenticators, but by the web application. The extension data does not need to be sent to the authenticator, but if it is, the authenticator ignores it.