Skip to content

Commit b8a9eb7

Browse files
committed
Add user response timeout docs
1 parent f6963cd commit b8a9eb7

3 files changed

Lines changed: 55 additions & 0 deletions

File tree

en/identity-server/7.2.0/docs/_data/configuration_catalog.yaml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1712,6 +1712,21 @@ sections:
17121712
17131713
# ─────────────────────────── FIDO / PASSKEYS ───────────────────────────
17141714

1715+
- id: fido
1716+
hyperlink: fido
1717+
title: FIDO
1718+
tasks: [configure-fido]
1719+
description: >
1720+
Configures general FIDO/WebAuthn settings such as the user response timeout for FIDO2 device registration.
1721+
1722+
configs:
1723+
- key: user_response_timeout
1724+
type: string
1725+
required: false
1726+
default: "300000"
1727+
description: >
1728+
The time in milliseconds sent as a hint to the browser for how long to wait for the user to interact with their FIDO2 authenticator during device registration. This timeout is enforced by the browser, not the server, and applies only to FIDO2 device registration (not authentication).
1729+
17151730
- id: fido.metadata_service
17161731
hyperlink: fido-metadata-service
17171732
title: FIDO metadata service

en/identity-server/next/docs/_data/configuration_catalog.yaml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1712,6 +1712,21 @@ sections:
17121712
17131713
# ─────────────────────────── FIDO / PASSKEYS ───────────────────────────
17141714

1715+
- id: fido
1716+
hyperlink: fido
1717+
title: FIDO
1718+
tasks: [configure-fido]
1719+
description: >
1720+
Configures general FIDO/WebAuthn settings such as the user response timeout for FIDO2 device registration.
1721+
1722+
configs:
1723+
- key: user_response_timeout
1724+
type: string
1725+
required: false
1726+
default: "300000"
1727+
description: >
1728+
The time in milliseconds sent as a hint to the browser for how long to wait for the user to interact with their FIDO2 authenticator during device registration. This timeout is enforced by the browser, not the server, and applies only to FIDO2 device registration (not authentication).
1729+
17151730
- id: fido.metadata_service
17161731
hyperlink: fido-metadata-service
17171732
title: FIDO metadata service

en/includes/guides/authentication/passwordless-login/add-passwordless-login-with-passkey.md

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -186,4 +186,29 @@ To enable this restriction, add the following configuration to the `<IS_HOME>/re
186186

187187
{% endif %}
188188

189+
{% if is_version is defined and is_version >= "7.1.0" %}
190+
191+
## Configure FIDO user response timeout
192+
193+
During FIDO2 device registration, {{ product_name }} sends a timeout hint to the browser indicating how long it should wait for the user to interact with their FIDO2 authenticator. By default, this is set to **300000 milliseconds (5 minutes)**.
194+
195+
!!! note
196+
This timeout is enforced by the browser, not by {{ product_name }}, and only applies to **device registration**. It does not affect the authentication flow. Some browsers may override this value based on their own policies.
197+
198+
To change this timeout, add the following configuration to the `<IS_HOME>/repository/conf/deployment.toml` file.
199+
200+
```toml
201+
[fido]
202+
user_response_timeout = "<timeout_in_milliseconds>"
203+
```
204+
205+
For example, to set the timeout to 2 minutes:
206+
207+
```toml
208+
[fido]
209+
user_response_timeout = "120000"
210+
```
211+
212+
{% endif %}
213+
189214
{% include "./fido-trusted-applications.md" %}

0 commit comments

Comments
 (0)