Windows Hello Step-Up Sign Challenge
A 3-step recipe with Microsoft Windows 10. We can help you get access.
Recipe · 3 steps
Windows Hello Step-Up Sign Challenge
with Microsoft Windows 10
Verify the user then sign a challenge with their Windows Hello credential.
- Prompt the user to verify their identity with Windows Hello biometrics or PIN, and only proceed when the result is Verified.
- Open the existing Windows Hello key credential for the account so it can be used for signing.
- Sign the supplied challenge buffer with the credential's private key and capture the signature for server-side verification.
What you'll need to have ready
- accountId: Account identifier whose credential signs the challenge.
- challenge: Base64-encoded challenge buffer to sign.
- message: Message shown to the user in the verification prompt.
For your developer
Arazzo workflow microsoft-windows-10:stepup-sign-challenge, 3 operations: verifyUserConsent → openKeyCredential → signWithCredential. Specs on APIs.io.