Add Biometric / WebAuthn Enrollment and Authentication

[binbashburns]

Describe the solution you'd like

• Given a user is setting up multi-factor authentication in Keycloak
• When the user reaches the MFA setup stage in the registration and authentication flows
• Then WebAuthn Passwordless Authentication (including biometric readers like TouchID, FaceID, Fingerprints, etc.) can be used for MFA

Describe things you've considered

• The initial login/self-registration flows would need to be modified to include WebAuthn / Passwordless enrollment (registration flow)
• Subsequent authentication flows (i.e. navigating to a mission app within UDS) would need to be updated to support WebAuthn / Biometric authentication (browser based authentication)

Additional context

• Medium Article
• Keycloak Documentation

Example Biometric Passkey Registration:

Example Biometric Passkey Authentication: