design pages: Passwordless-GDM integration

[ikerexxe]

Passwordless authentication from the GUI.

[sumit-bose]

Hi,

thank you for the updates, I have no further comments.

bye,
Sumit

[ikerexxe]

I updated the design with new attributes in the smartcard mechanism. They are necessary since the certificate information isn't available during the AUTH phase and we prefer to avoid running p11_child again. Thus, we are using the JSON-based communication as a shared memory to hold the certificate data that is needed later on.

[ikerexxe]

Updated design with additional attributes needed for passkey authentication.

[ikerexxe]

@pbrezina @sumit-bose I updated the text with the improvements proposed. Take another look to make sure everything is correct.

[sumit-bose]

@pbrezina @sumit-bose I updated the text with the improvements proposed. Take another look to make sure everything is correct.

Hi,

thanks for the updates, the "krb5_child" section is looking good, ACK.

bye,
Sumit

[ikerexxe]

As discussed with Joan I'm updating the design with the following changes:

• Update attributes to camel case
• Remove initInstruction for smartcard as this won't be needed
• Convert the smartcard list to an actual JSON array