diff --git a/authentik/stages/authenticator_webauthn/stage.py b/authentik/stages/authenticator_webauthn/stage.py index d5e6080d8..d16e42615 100644 --- a/authentik/stages/authenticator_webauthn/stage.py +++ b/authentik/stages/authenticator_webauthn/stage.py @@ -122,7 +122,8 @@ class AuthenticatorWebAuthnStageView(ChallengeStageView): registration_dict = make_credential_options.registration_dict registration_dict["authenticatorSelection"] = { - "authenticatorAttachment": "cross-platform" + "requireResidentKey": False, + "userVerification": "preferred", } return AuthenticatorWebAuthnChallenge(