Org: ST (i—org)
App: org—st
Client IP from log: 9—6
System Log:
Event: Activate factor for user — FAILURE
Message: User failed to set up FIDO_WEBAUTHN factor
API error:
POST /idp/myaccount/webauthn
E0000001 — invalid clientData or attestation
errorId: oaeE017f6MuQyarMtNx7x2iRw (or latest)
Evidence:
- iOS MyAccount passkey enrollment WORKS on same org
- Android challengeMatches=true
- clientData.origin: android:apk-key-hash:wd4nse_3-vzDjfZ7PEyIy1KMaY9q4NXlaXWBOKhep3s
- assetlinks.json has org.healthfirst.android.member.st + apk-key-hash entries
- attestation rpIdHash matches identity-st.healthfirst.org
- Block synced passkeys: OFF
Question:
Why does FIDO_WEBAUTHN factor activation fail for Android native
MyAccount enrollment when iOS succeeds? Is Android native origin
supported for MyAccount WebAuthn on this org?