Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Okta Provider
  4. API Docs
  5. getAuthenticatorMethodWebauthn
Viewing docs for Okta v6.9.0
published on Wednesday, Jul 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-okta

okta.getAuthenticatorMethodWebauthn

okta logo
Viewing docs for Okta v6.9.0
published on Wednesday, Jul 1, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-okta

    WARNING: This feature is only available as a part of the Identity Engine. Contact support for further information.

    Reads the WebAuthn authenticator method settings, including AAGUID groups, user verification preferences, and passkey configuration.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as okta from "@pulumi/okta";

const webauthn = okta.getAuthenticator({
    key: "webauthn",
});
const example = webauthn.then(webauthn => okta.getAuthenticatorMethodWebauthn({
    authenticatorId: webauthn.id,
}));

    import pulumi
import pulumi_okta as okta

webauthn = okta.get_authenticator(key="webauthn")
example = okta.get_authenticator_method_webauthn(authenticator_id=webauthn.id)

    package main

import (
	"github.com/pulumi/pulumi-okta/sdk/v6/go/okta"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		webauthn, err := okta.GetAuthenticator(ctx, &okta.LookupAuthenticatorArgs{
			Key: pulumi.StringRef("webauthn"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = okta.GetAuthenticatorMethodWebauthn(ctx, &okta.LookupAuthenticatorMethodWebauthnArgs{
			AuthenticatorId: webauthn.Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Okta = Pulumi.Okta;

return await Deployment.RunAsync(() => 
{
    var webauthn = Okta.GetAuthenticator.Invoke(new()
    {
        Key = "webauthn",
    });

    var example = Okta.GetAuthenticatorMethodWebauthn.Invoke(new()
    {
        AuthenticatorId = webauthn.Apply(getAuthenticatorResult => getAuthenticatorResult.Id),
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.okta.OktaFunctions;
import com.pulumi.okta.inputs.GetAuthenticatorArgs;
import com.pulumi.okta.inputs.GetAuthenticatorMethodWebauthnArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var webauthn = OktaFunctions.getAuthenticator(GetAuthenticatorArgs.builder()
            .key("webauthn")
            .build());

        final var example = OktaFunctions.getAuthenticatorMethodWebauthn(GetAuthenticatorMethodWebauthnArgs.builder()
            .authenticatorId(webauthn.id())
            .build());

    }
}

    variables:
  webauthn:
    fn::invoke:
      function: okta:getAuthenticator
      arguments:
        key: webauthn
  example:
    fn::invoke:
      function: okta:getAuthenticatorMethodWebauthn
      arguments:
        authenticatorId: ${webauthn.id}

    pulumi {
  required_providers {
    okta = {
      source = "pulumi/okta"
    }
  }
}

data "okta_getauthenticator" "webauthn" {
  key = "webauthn"
}
data "okta_getauthenticatormethodwebauthn" "example" {
  authenticator_id = data.okta_getauthenticator.webauthn.id
}

    Using getAuthenticatorMethodWebauthn

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAuthenticatorMethodWebauthn(args: GetAuthenticatorMethodWebauthnArgs, opts?: InvokeOptions): Promise<GetAuthenticatorMethodWebauthnResult>
function getAuthenticatorMethodWebauthnOutput(args: GetAuthenticatorMethodWebauthnOutputArgs, opts?: InvokeOptions): Output<GetAuthenticatorMethodWebauthnResult>
    def get_authenticator_method_webauthn(aaguid_groups: Optional[Sequence[GetAuthenticatorMethodWebauthnAaguidGroup]] = None,
                                      authenticator_id: Optional[str] = None,
                                      rp_id: Optional[GetAuthenticatorMethodWebauthnRpId] = None,
                                      opts: Optional[InvokeOptions] = None) -> GetAuthenticatorMethodWebauthnResult
def get_authenticator_method_webauthn_output(aaguid_groups: pulumi.Input[Optional[Sequence[pulumi.Input[GetAuthenticatorMethodWebauthnAaguidGroupArgs]]]] = None,
                                      authenticator_id: pulumi.Input[Optional[str]] = None,
                                      rp_id: pulumi.Input[Optional[GetAuthenticatorMethodWebauthnRpIdArgs]] = None,
                                      opts: Optional[InvokeOptions] = None) -> Output[GetAuthenticatorMethodWebauthnResult]
    func LookupAuthenticatorMethodWebauthn(ctx *Context, args *LookupAuthenticatorMethodWebauthnArgs, opts ...InvokeOption) (*LookupAuthenticatorMethodWebauthnResult, error)
func LookupAuthenticatorMethodWebauthnOutput(ctx *Context, args *LookupAuthenticatorMethodWebauthnOutputArgs, opts ...InvokeOption) LookupAuthenticatorMethodWebauthnResultOutput

    > Note: This function is named LookupAuthenticatorMethodWebauthn in the Go SDK.

    public static class GetAuthenticatorMethodWebauthn 
{
    public static Task<GetAuthenticatorMethodWebauthnResult> InvokeAsync(GetAuthenticatorMethodWebauthnArgs args, InvokeOptions? opts = null)
    public static Output<GetAuthenticatorMethodWebauthnResult> Invoke(GetAuthenticatorMethodWebauthnInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAuthenticatorMethodWebauthnResult> getAuthenticatorMethodWebauthn(GetAuthenticatorMethodWebauthnArgs args, InvokeOptions options)
public static Output<GetAuthenticatorMethodWebauthnResult> getAuthenticatorMethodWebauthn(GetAuthenticatorMethodWebauthnArgs args, InvokeOptions options)

    fn::invoke:
  function: okta:index/getAuthenticatorMethodWebauthn:getAuthenticatorMethodWebauthn
  arguments:
    # arguments dictionary
    data "okta_get_authenticator_method_webauthn" "name" {
    # arguments
}

    The following arguments are supported:

    AuthenticatorId string
    The ID of the WebAuthn authenticator.
    AaguidGroups List<GetAuthenticatorMethodWebauthnAaguidGroup>
    The FIDO2 AAGUID groups. Each element contains:
    RpId GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    AuthenticatorId string
    The ID of the WebAuthn authenticator.
    AaguidGroups []GetAuthenticatorMethodWebauthnAaguidGroup
    The FIDO2 AAGUID groups. Each element contains:
    RpId GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    authenticator_id string
    The ID of the WebAuthn authenticator.
    aaguid_groups list(object)
    The FIDO2 AAGUID groups. Each element contains:
    rp_id object
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    authenticatorId String
    The ID of the WebAuthn authenticator.
    aaguidGroups List<GetAuthenticatorMethodWebauthnAaguidGroup>
    The FIDO2 AAGUID groups. Each element contains:
    rpId GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    authenticatorId string
    The ID of the WebAuthn authenticator.
    aaguidGroups GetAuthenticatorMethodWebauthnAaguidGroup[]
    The FIDO2 AAGUID groups. Each element contains:
    rpId GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    authenticator_id str
    The ID of the WebAuthn authenticator.
    aaguid_groups Sequence[GetAuthenticatorMethodWebauthnAaguidGroup]
    The FIDO2 AAGUID groups. Each element contains:
    rp_id GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    authenticatorId String
    The ID of the WebAuthn authenticator.
    aaguidGroups List<Property Map>
    The FIDO2 AAGUID groups. Each element contains:
    rpId Property Map
    The Relying Party (RP) ID configuration for WebAuthn. Contains:

    getAuthenticatorMethodWebauthn Result

    The following output properties are available:

    AllowSyncablePasskeys bool
    Whether syncable passkeys are allowed.
    Attachment string
    Method attachment setting.
    AuthenticatorId string
    CertBasedAttestationValidation bool
    Whether certificate-based attestation validation is enabled.
    EnableAutofillUi bool
    Whether the passkeys autofill UI is enabled.
    FipsCompliant bool
    Whether the authenticator must be FIPS compliant.
    HardwareProtected bool
    Whether the authenticator must store the private key on hardware.
    Id string
    ResidentKeyRequirement string
    Resident key requirement setting.
    ShowSignInWithAPasskeyButton bool
    Whether the "Sign in with a Passkey" button is shown.
    Status string
    The status of the WebAuthn method (ACTIVE or INACTIVE).
    UserVerification string
    User verification setting for enrollment.
    UserVerificationForVerify string
    User verification setting for authentication.
    AaguidGroups List<GetAuthenticatorMethodWebauthnAaguidGroup>
    The FIDO2 AAGUID groups. Each element contains:
    RpId GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    AllowSyncablePasskeys bool
    Whether syncable passkeys are allowed.
    Attachment string
    Method attachment setting.
    AuthenticatorId string
    CertBasedAttestationValidation bool
    Whether certificate-based attestation validation is enabled.
    EnableAutofillUi bool
    Whether the passkeys autofill UI is enabled.
    FipsCompliant bool
    Whether the authenticator must be FIPS compliant.
    HardwareProtected bool
    Whether the authenticator must store the private key on hardware.
    Id string
    ResidentKeyRequirement string
    Resident key requirement setting.
    ShowSignInWithAPasskeyButton bool
    Whether the "Sign in with a Passkey" button is shown.
    Status string
    The status of the WebAuthn method (ACTIVE or INACTIVE).
    UserVerification string
    User verification setting for enrollment.
    UserVerificationForVerify string
    User verification setting for authentication.
    AaguidGroups []GetAuthenticatorMethodWebauthnAaguidGroup
    The FIDO2 AAGUID groups. Each element contains:
    RpId GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    allow_syncable_passkeys bool
    Whether syncable passkeys are allowed.
    attachment string
    Method attachment setting.
    authenticator_id string
    cert_based_attestation_validation bool
    Whether certificate-based attestation validation is enabled.
    enable_autofill_ui bool
    Whether the passkeys autofill UI is enabled.
    fips_compliant bool
    Whether the authenticator must be FIPS compliant.
    hardware_protected bool
    Whether the authenticator must store the private key on hardware.
    id string
    resident_key_requirement string
    Resident key requirement setting.
    show_sign_in_with_a_passkey_button bool
    Whether the "Sign in with a Passkey" button is shown.
    status string
    The status of the WebAuthn method (ACTIVE or INACTIVE).
    user_verification string
    User verification setting for enrollment.
    user_verification_for_verify string
    User verification setting for authentication.
    aaguid_groups list(object)
    The FIDO2 AAGUID groups. Each element contains:
    rp_id object
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    allowSyncablePasskeys Boolean
    Whether syncable passkeys are allowed.
    attachment String
    Method attachment setting.
    authenticatorId String
    certBasedAttestationValidation Boolean
    Whether certificate-based attestation validation is enabled.
    enableAutofillUi Boolean
    Whether the passkeys autofill UI is enabled.
    fipsCompliant Boolean
    Whether the authenticator must be FIPS compliant.
    hardwareProtected Boolean
    Whether the authenticator must store the private key on hardware.
    id String
    residentKeyRequirement String
    Resident key requirement setting.
    showSignInWithAPasskeyButton Boolean
    Whether the "Sign in with a Passkey" button is shown.
    status String
    The status of the WebAuthn method (ACTIVE or INACTIVE).
    userVerification String
    User verification setting for enrollment.
    userVerificationForVerify String
    User verification setting for authentication.
    aaguidGroups List<GetAuthenticatorMethodWebauthnAaguidGroup>
    The FIDO2 AAGUID groups. Each element contains:
    rpId GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    allowSyncablePasskeys boolean
    Whether syncable passkeys are allowed.
    attachment string
    Method attachment setting.
    authenticatorId string
    certBasedAttestationValidation boolean
    Whether certificate-based attestation validation is enabled.
    enableAutofillUi boolean
    Whether the passkeys autofill UI is enabled.
    fipsCompliant boolean
    Whether the authenticator must be FIPS compliant.
    hardwareProtected boolean
    Whether the authenticator must store the private key on hardware.
    id string
    residentKeyRequirement string
    Resident key requirement setting.
    showSignInWithAPasskeyButton boolean
    Whether the "Sign in with a Passkey" button is shown.
    status string
    The status of the WebAuthn method (ACTIVE or INACTIVE).
    userVerification string
    User verification setting for enrollment.
    userVerificationForVerify string
    User verification setting for authentication.
    aaguidGroups GetAuthenticatorMethodWebauthnAaguidGroup[]
    The FIDO2 AAGUID groups. Each element contains:
    rpId GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    allow_syncable_passkeys bool
    Whether syncable passkeys are allowed.
    attachment str
    Method attachment setting.
    authenticator_id str
    cert_based_attestation_validation bool
    Whether certificate-based attestation validation is enabled.
    enable_autofill_ui bool
    Whether the passkeys autofill UI is enabled.
    fips_compliant bool
    Whether the authenticator must be FIPS compliant.
    hardware_protected bool
    Whether the authenticator must store the private key on hardware.
    id str
    resident_key_requirement str
    Resident key requirement setting.
    show_sign_in_with_a_passkey_button bool
    Whether the "Sign in with a Passkey" button is shown.
    status str
    The status of the WebAuthn method (ACTIVE or INACTIVE).
    user_verification str
    User verification setting for enrollment.
    user_verification_for_verify str
    User verification setting for authentication.
    aaguid_groups Sequence[GetAuthenticatorMethodWebauthnAaguidGroup]
    The FIDO2 AAGUID groups. Each element contains:
    rp_id GetAuthenticatorMethodWebauthnRpId
    The Relying Party (RP) ID configuration for WebAuthn. Contains:
    allowSyncablePasskeys Boolean
    Whether syncable passkeys are allowed.
    attachment String
    Method attachment setting.
    authenticatorId String
    certBasedAttestationValidation Boolean
    Whether certificate-based attestation validation is enabled.
    enableAutofillUi Boolean
    Whether the passkeys autofill UI is enabled.
    fipsCompliant Boolean
    Whether the authenticator must be FIPS compliant.
    hardwareProtected Boolean
    Whether the authenticator must store the private key on hardware.
    id String
    residentKeyRequirement String
    Resident key requirement setting.
    showSignInWithAPasskeyButton Boolean
    Whether the "Sign in with a Passkey" button is shown.
    status String
    The status of the WebAuthn method (ACTIVE or INACTIVE).
    userVerification String
    User verification setting for enrollment.
    userVerificationForVerify String
    User verification setting for authentication.
    aaguidGroups List<Property Map>
    The FIDO2 AAGUID groups. Each element contains:
    rpId Property Map
    The Relying Party (RP) ID configuration for WebAuthn. Contains:

    Supporting Types

    GetAuthenticatorMethodWebauthnAaguidGroup

    Aaguids List<string>
    List of FIDO2 AAGUIDs in this group.
    Name string
    The name of the AAGUID group.
    Aaguids []string
    List of FIDO2 AAGUIDs in this group.
    Name string
    The name of the AAGUID group.
    aaguids list(string)
    List of FIDO2 AAGUIDs in this group.
    name string
    The name of the AAGUID group.
    aaguids List<String>
    List of FIDO2 AAGUIDs in this group.
    name String
    The name of the AAGUID group.
    aaguids string[]
    List of FIDO2 AAGUIDs in this group.
    name string
    The name of the AAGUID group.
    aaguids Sequence[str]
    List of FIDO2 AAGUIDs in this group.
    name str
    The name of the AAGUID group.
    aaguids List<String>
    List of FIDO2 AAGUIDs in this group.
    name String
    The name of the AAGUID group.

    GetAuthenticatorMethodWebauthnRpId

    Enabled bool
    Whether the RP ID is active and used for WebAuthn operations.
    Domain GetAuthenticatorMethodWebauthnRpIdDomain
    The RP domain configuration. Contains:
    Enabled bool
    Whether the RP ID is active and used for WebAuthn operations.
    Domain GetAuthenticatorMethodWebauthnRpIdDomain
    The RP domain configuration. Contains:
    enabled bool
    Whether the RP ID is active and used for WebAuthn operations.
    domain object
    The RP domain configuration. Contains:
    enabled Boolean
    Whether the RP ID is active and used for WebAuthn operations.
    domain GetAuthenticatorMethodWebauthnRpIdDomain
    The RP domain configuration. Contains:
    enabled boolean
    Whether the RP ID is active and used for WebAuthn operations.
    domain GetAuthenticatorMethodWebauthnRpIdDomain
    The RP domain configuration. Contains:
    enabled bool
    Whether the RP ID is active and used for WebAuthn operations.
    domain GetAuthenticatorMethodWebauthnRpIdDomain
    The RP domain configuration. Contains:
    enabled Boolean
    Whether the RP ID is active and used for WebAuthn operations.
    domain Property Map
    The RP domain configuration. Contains:

    GetAuthenticatorMethodWebauthnRpIdDomain

    Name string
    The name of the AAGUID group.
    ValidationStatus string
    The validation status of the domain.
    Name string
    The name of the AAGUID group.
    ValidationStatus string
    The validation status of the domain.
    name string
    The name of the AAGUID group.
    validation_status string
    The validation status of the domain.
    name String
    The name of the AAGUID group.
    validationStatus String
    The validation status of the domain.
    name string
    The name of the AAGUID group.
    validationStatus string
    The validation status of the domain.
    name str
    The name of the AAGUID group.
    validation_status str
    The validation status of the domain.
    name String
    The name of the AAGUID group.
    validationStatus String
    The validation status of the domain.

    Package Details

    Repository
    Okta pulumi/pulumi-okta
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the okta Terraform Provider.
    okta logo
    Viewing docs for Okta v6.9.0
    published on Wednesday, Jul 1, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-okta

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial