Troubleshooting: FIDO Enrollment Changes Revert After Saving

Version Affected: 20.06+

 

Overview

When an end-user tries to change or delete their FIDO enrollment information through their SecureAuth realm, the new name/description or the deletion appears to save, but then reverts back to the original state.

Cause

A Web Application Firewall (WAF) or load balancer in front of the FIDO realm is blocking the HTTP PUT and DELETE methods. When an end-user updates their FIDO information, the browser sends a PUT request; when deleting an enrollment, it sends a DELETE request. If the WAF or load balancer blocks either method, the update or deletion is silently denied before it reaches the realm.

Resolution:

Add a rule on the WAF or load balancer that allows the PUT and DELETE methods for requests to the FIDO realm.

Special Considerations

Setting MFA options via the New Experience (SWAP) console can also use the PUT method. If the Admin Console is accessed over a public internet connection, add the same PUT/DELETE allow rule for the SecureAuth0 realm as well.


 

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.