Web Authentication API

E856225

W3C Recommendation authentication protocol web standard

The Web Authentication API is a web standard that enables secure, passwordless authentication on the web using public-key cryptography and authenticators such as security keys or built-in platform authenticators.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (4)

Label	Occurrences
WebAuthn	9
Web Authentication API canonical	4
Web Authentication	3
Web Authentication specification	1

How this entity was disambiguated

This entity first appeared as the object of triple T10329246 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: Web Authentication API
Context triple: [Open Web Platform, hasComponent, Web Authentication API]

A. AUTH
AUTH is a major public university in Thessaloniki, Greece, and one of the largest and most prestigious higher education institutions in the country.
B. OpenID Connect
OpenID Connect is an identity layer built on top of OAuth 2.0 that enables secure user authentication and single sign-on across applications.
C. OAuth
OAuth is an open standard authorization framework that enables secure, delegated access to protected resources without sharing user credentials.
D. HttpAuthenticationMechanism API
The HttpAuthenticationMechanism API is a Jakarta Security interface that standardizes how HTTP-based authentication is implemented and integrated into Jakarta EE web applications.
E. Wikimedia unified login
Wikimedia unified login is a single sign-on system that lets users access and manage their accounts across all Wikimedia projects with one set of credentials.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: Web Authentication API
Target entity description: The Web Authentication API is a web standard that enables secure, passwordless authentication on the web using public-key cryptography and authenticators such as security keys or built-in platform authenticators.

A. AUTH
AUTH is a major public university in Thessaloniki, Greece, and one of the largest and most prestigious higher education institutions in the country.
B. OpenID Connect
OpenID Connect is an identity layer built on top of OAuth 2.0 that enables secure user authentication and single sign-on across applications.
C. OAuth
OAuth is an open standard authorization framework that enables secure, delegated access to protected resources without sharing user credentials.
D. HttpAuthenticationMechanism API
The HttpAuthenticationMechanism API is a Jakarta Security interface that standardizes how HTTP-based authentication is implemented and integrated into Jakarta EE web applications.
E. Wikimedia unified login
Wikimedia unified login is a single sign-on system that lets users access and manage their accounts across all Wikimedia projects with one set of credentials.
F. None of above. chosen

Statements (54)

Predicate	Object
instanceOf	W3C Recommendation ⓘ authentication protocol ⓘ web standard ⓘ
alsoKnownAs	Web Authentication ⓘ linked to: Web Authentication API WebAuthn ⓘ linked to: Web Authentication API
basedOn	CTAP ⓘ Client to Authenticator Protocol ⓘ
compatibleWith	HTTPS ⓘ
defines	navigator.credentials.create ⓘ navigator.credentials.get ⓘ
designedFor	web applications ⓘ web browsers ⓘ
enables	strong user authentication on the web ⓘ
extends	Credential Management API ⓘ
goal	improve authentication security ⓘ improve user experience ⓘ reduce phishing attacks ⓘ replace passwords with public-key credentials ⓘ
hasVersion	Level 1 ⓘ Level 2 ⓘ Level 3 ⓘ
improvesOver	password-based authentication ⓘ
partOf	FIDO2 Project ⓘ linked to: FIDO2
prevents	credential replay across origins ⓘ
relatedTo	FIDO Alliance ⓘ FIDO U2F ⓘ FIDO2 ⓘ
requires	secure context ⓘ
standardizedBy	W3C ⓘ linked to: World Wide Web Consortium World Wide Web Consortium ⓘ
supports	PIN-based verification via authenticators ⓘ biometric verification via authenticators ⓘ built-in device authenticators ⓘ multi-factor authentication ⓘ origin-bound credentials ⓘ passwordless authentication ⓘ phishing-resistant authentication ⓘ platform authenticators ⓘ roaming authenticators ⓘ security keys ⓘ two-factor authentication ⓘ user presence checks ⓘ user verification checks ⓘ
usedBy	major web browsers ⓘ web application developers ⓘ
uses	public-key cryptography ⓘ
usesConcept	assertion ⓘ attestation ⓘ authenticator ⓘ authenticatorData ⓘ clientDataJSON ⓘ credential ID ⓘ public key credential ⓘ relying party ⓘ

How these facts were elicited