Cannot complete registration on WebAuthn Tree

[nirving]

Setting up WebAuthn on FRAM 7.4.0 and when I register a PassKey I get the following error.

Caused by: java.lang.NullPointerException: null
        at org.forgerock.openam.core.rest.devices.webauthn.WebAuthnDeviceJsonUtils.toDeviceSettingValue(WebAuthnDeviceJsonUtils.java:47)
        at org.forgerock.openam.auth.nodes.webauthn.WebAuthnDeviceStorageNode.process(WebAuthnDeviceStorageNode.java:149)
        at org.forgerock.openam.auth.trees.engine.AuthTreeExecutor.process(AuthTreeExecutor.java:153)
        ... 125 common frames omitted

Device has been registered, as I can use it to log in a second time. Just cannot complete the registraion process.

[edward.johnson]

Hello @nirving

Thanks for reaching out to the Community.

There is a developer session available within the Community that provides a technical deep dive into the implementation of WebAuthn and Passkeys using ForgeRock SDKs which may provide some assistance for you.

Recording for "Using WebAuthn and Passkeys with the ForgeRock SDKs" developer session

In this developer session, George Bafaloukas, a senior mobile development consultant, deep dives into technical implementation on WebAuthn and Passkeys using ForgeRock SDKs. Passkeys are a new way to sign in without passwords. Passkeys are more secure and easier to use than passwords or any current two-factor authentication methods. In this session, you will learn about passkeys make the end user experience sleek and also how passkeys are changing the way we log in! Have a question? Drop it in …

Also, please review this use case article from the Community on configuring passwordless login.

Use case: Configure passwordless login in ForgeRock Identity Cloud

Use case overview Enabling your organization to design secure and seamless login journeys without the need for passwords is a common use case that is easily implemented in ForgeRock Identity Cloud. Passwordless authentication not only improves the user experience by avoiding the need to remember multiple passwords but it also reduces an organization’s attack surface by virtually eliminating credential theft arising from phishing attacks, password reuse, credential stuffing, keyloggers, and mor…

I hope the information provided helps you to verify the steps you have used to set up WebAuthn.

Warm Regards,
Ed