capabilities.work

Windows Hello Step-Up Sign Challenge

A 3-step recipe with Microsoft Windows 10. We can help you get access.

Recipe · 3 steps

Windows Hello Step-Up Sign Challenge

Verify the user then sign a challenge with their Windows Hello credential.

  1. Prompt the user to verify their identity with Windows Hello biometrics or PIN, and only proceed when the result is Verified.
  2. Open the existing Windows Hello key credential for the account so it can be used for signing.
  3. Sign the supplied challenge buffer with the credential's private key and capture the signature for server-side verification.
What you'll need to have ready
  • accountId: Account identifier whose credential signs the challenge.
  • challenge: Base64-encoded challenge buffer to sign.
  • message: Message shown to the user in the verification prompt.
For your developer

Arazzo workflow microsoft-windows-10:stepup-sign-challenge, 3 operations: verifyUserConsent → openKeyCredential → signWithCredential. Specs on APIs.io.