Agent-Skills.md

Agent Skills: Implementing Passwordless Authentication with FIDO2

Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators. Covers WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentica

UncategorizedID: autohandai/community-skills/implementing-passwordless-authentication-with-fido2

Repository

autohandai/community-skills
autohandaiLicense: Apache-2.0
103

Install this agent skill to your local

pnpm dlx add-skill https://github.com/autohandai/community-skills/tree/HEAD/implementing-passwordless-authentication-with-fido2

Skill Files

Browse the full folder contents for implementing-passwordless-authentication-with-fido2.

Download Skill

Loading file tree…

implementing-passwordless-authentication-with-fido2/SKILL.md

Skill Metadata

Name
implementing-passwordless-authentication-with-fido2
Description
Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators. Covers WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentica

Implementing Passwordless Authentication with FIDO2

Overview

Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators. Covers WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentication, and migration from password-based systems aligned with NIST SP 800-63B AAL3.

Objectives

  • Implement comprehensive implementing passwordless authentication with fido2 capability
  • Establish automated discovery and monitoring processes
  • Integrate with enterprise IAM and security tools
  • Generate compliance-ready documentation and reports
  • Align with NIST 800-53 access control requirements

Security Controls

| Control | NIST 800-53 | Description | |---------|-------------|-------------| | Account Management | AC-2 | Lifecycle management | | Access Enforcement | AC-3 | Policy-based access control | | Least Privilege | AC-6 | Minimum necessary permissions | | Audit Logging | AU-3 | Authentication and access events | | Identification | IA-2 | User and service identification |

Verification

  • [ ] Implementation tested in non-production environment
  • [ ] Security policies configured and enforced
  • [ ] Audit logging enabled and forwarding to SIEM
  • [ ] Documentation and runbooks complete
  • [ ] Compliance evidence generated