Security key management¶
The Security key management module gives the administrator a consolidated view of every FIDO / WebAuthn key enrolled by users across the various domains. It is intended for an administrator who needs to audit the enrolled keys for their scope and, when required, revoke the keys that must no longer be used (employee leaving, lost key, replaced key).
Enrollment — user portal only
Enrolling a security key physically requires the key itself: the operation is therefore performed exclusively by the user from the user portal. The administration console does not provide an add action.
Key listing¶
The main window lists the enrolled keys, across all users and all domains (according to the active filter).
| Element | Description |
|---|---|
| Domain drop-down | Unlabelled, on the right of the toolbar. A synthetic All entry is added at the top to show every key. Anonymous domains are excluded from it. |
| Search field | Text-based search on the grid content. |
| Refresh button | The one in the grid footer, which reloads the list from the server. |
| Column | Description |
|---|---|
| Name | Label chosen by the user when enrolling the key from the portal. |
| User | User identifier qualified with the domain, in the form user@domain. |
| Date | Enrollment date and time of the key, in dd/mm/yyyy - hh:mm format, followed by the time zone. |
No domain available
If no eligible domain is present, the delete button, the refresh button, the page-size selector and the search field are disabled. A domain supporting security-key enrollment must be created or activated first. As long as no key is enrolled, the grid shows No security key.
Delete a key¶
- Select one or more keys in the list (multi-selection is supported).
- Click the × button.
- Confirm: the console asks Are you sure you want to delete this key?, plural when several keys are retained. With no selection, it answers Select Line.
The removal is applied immediately: the key can no longer be used to authenticate. The user can, if needed, enroll a new key from the portal.
Partial deletion
If some keys cannot be deleted, the console reports it under the title Security keys: The following security keys couldn't be deleted: followed by the list, in the form user@domain -> key name — or The following security key couldn't be deleted for a single one. The other retained keys are still deleted normally.