FidoMetadataStatement BiometricAccuracyDescriptor IAPAR Support

53 views

Skip to first unread message

Benny Mei

unread,

Jul 26, 2025, 3:25:28 AMJul 26

to FIDO Dev (fido-dev)

I noticed that the spec for BiometricAccuracyDescriptor in FIDO Metadata Statement does not have support for the Impostor Attack Presentation Accept Rate field. It's my understanding that support for all fields described in the FIDO Biometric Requirements is required for conformance.

This is affecting me because Yubico's Java webauthn library does not support IAPAR values as it isn't defined in the spec for FIDO Metadata Statement.

I downloaded a blob file earlier from https://fidoalliance.org/metadata/ with md5 hash 34421d0cb4dbe98aa11ce833318d511f . Some examples of aaguids that include a field named "iAPARThreshold" are

6e8d1eae-8d40-4c25-bcf8-4633959afc71
6ec5cff2-a0f9-4169-945b-f33b563f7b99
5626bed4-e756-430b-a7ff-ca78c8b12738

How can we get iAPARThreshold defined in FIDO Metadata Statement so that Yubico's Java library, and other WebAuthn libraries / implementers will be able to parse the iAPARThreshold value from the metadata blob?

Reply all

Reply to author

Forward

0 new messages