Amazon WorkSpaces Secure Browser now supports WebAuthn redirection for local Chromium browsers

Amazon WorkSpaces Secure Browser Updates

Amazon WorkSpaces Secure Browser now supports Web Authentication (WebAuthn) redirection, enabling users to authenticate to websites using their local FIDO2 security keys, biometric authenticators, and platform authenticators while browsing in their WorkSpaces Secure Browser session. This feature is compatible with Chromium-based browsers such as Google Chrome 136 (or later) or Microsoft Edge 137 (or later) on users’ local devices. It is not supported on non-Chromium-based browsers like Safari or Firefox.

WebAuthn redirection allows for seamless and secure authentication on websites within WorkSpaces Secure Browser sessions, supporting FIDO2 security keys, passkeys, and platform authenticators like Windows Hello or Touch ID. To enable this feature, administrators must activate WebAuthn redirection in the Secure Browser’s portal settings and configure local browsers using the WebAuthenticationRemoteDesktopAllowedOrigins policy. This configuration ensures secure transmission of WebAuthn tokens from a user’s local device to websites within a Secure Browser session, maintaining the security benefits of the remote browsing environment.

What to do

• Activate WebAuthn redirection in the Secure Browser’s portal settings.
• Configure local browsers using the WebAuthenticationRemoteDesktopAllowedOrigins policy.
• Visit the Amazon WorkSpaces Secure Browser console to get started.

This feature is available at no additional cost in all regions where Amazon WorkSpaces Secure Browser is available, including US East (N. Virginia), US West (Oregon), Canada (Central), Europe (Frankfurt, London, Ireland), and Asia Pacific (Tokyo, Mumbai, Sydney, Singapore).

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.