@njanaskie I don't have any experience with that flow. Hopefully someone that may have had some experience with this can chime in.

@njanaskie said in Update on supporting discoverable WebAuthn credentials:

You are right. FusionAuth does not support discoverable WebAuthn passkeys. In the page you referred to, there is some verbiage that states that directly in the credential.clientExtensionResults.credProps.rk section.

'FusionAuth does not currently support discoverable credentials (sometimes referred to as "resident keys").'

I'd recommend checking the FusionAuth GitHub issues or opening/upvoting a feature request to track progress on this.

Maybe if you tell us a little more about your use case and why the user can't enter the username/email someone can help with a work around.

@nikola Have you checked out our kickstarts or APIs? You should be able to apply the license keys and configure your environments as needed.

If this isn't what you mean, please just give me a little more detail on what you are trying to do and I'll help the best I can.

@anthea-mo It looks like the fix is to upgrade.

I also found this on the users accounts being locked.

If this information does not get you where you need, please let me know.

@mqwirtnuf How's it going? Can you share your upgrade process?

@johnmiller I'm not 100% sure but that may be by design. You don't want to give away too much information. If it returned a specific error code, then you would know if the user exists or not.

@elliotdickison Can you let us know what third party OIDC IdP you are working with?

It's one thing to read about new features in the release notes and another to see them demo'd. If you're interested in what FusionAuth has been up to, come check it out tomorrow in our Q1 2026 edition of Shipped!

@batmysta Going to link to this issue.

@batmysta I know this is a bit of a "trick" answer, but the reality is the right answer depends on what exactly you want the user to have access for. I understand that the roles in FusionAuth may give more access than you may like (I.E. MFA is a tenant level settings, but there is no role just for MFA edit.), but there are some other options.

Again, depending on what you want to do and what version you are running, there is the idea of the Tenant Manager applicaiton. This will still not help you with MFA settings thought.

The other option is using the APIs. Since everything in The FusionAuth admin UI is API first, you could create your own application that would allow users you choose to edit them.

Hope this is useful.