1

I am trying to implement passkey authentication at my company. We use Keycloak, but we encounter the same issue on https://www.passkeys.io/.

Here's the strange part: when I am at the company building, it doesn't work—we get the infamous "something went wrong" popup during the registration process. However, when we are at home using VPN, everything works fine. Another oddity is that it works on Windows 10 but not on Windows 11.

current system is windows 11 23H2

Here is what we have tried so far:

  • Deactivated Credential Guard
  • Used Wireshark to check Bluetooth packets (results were the same in both cases, meaning we got the same packets sent in BLE working or not)
  • Reviewed all possible event logs but found nothing
  • Checked the proxy settings, although it should not be involved
  • Tested on both https://www.passkeys.io/ and a local Keycloak instance (same behavior)
  • search on internet...

A detail description of the comportment

  1. opening chrome on https://www.passkeys.io/
  2. click on the "don't have an account?"
  3. entering an email and clicking on continue
  4. click on continue on the create a passkey screen
  5. the popup for using a phone appeared clicking next
  6. reading the qr code with my phone
  7. validating something on my phone
  8. after some times less than 10 seconds a popup appeared saying "something went wrong"

we test this on apple and android phones, it does not work. if we use the bitwarden app it works.

Has anyone else encountered this type of problem and found a solution?

Bonky42
  • 31

1 Answers1

2

After multiple test, wireshark & co. We finally found the problem. It CredentialUiBroker.exe is requesting 2 uris:

  • cable.auth.com
  • cable.ua5v.com

one for android and one for iphone. But completely ignoring proxy settings, it makes a direct dns request and try to connect to it directly after that

We manage to give direct access to this 2 uris and it works after that.

Bonky42
  • 31