Unable to enable urn:okta:params:oauth:grant-type:webauthn grant

[jwamin]

the FIDO2 / Webauthn / urn:okta:params:oauth:grant-type:webauthn grant is stubbornly disabled for existing native application in dev tenet using the admin panel.

okta-mobile-swift/Sources/AuthFoundation/Responses/GrantType.swift at master · okta/okta-mobile-swift · GitHub indicates that single factor passkey signin is available as a configurable option for native applications. (Attached)

Attempting to authenticate will only return:

"The client is not authorized to use the provided grant type. Configured grant types: [authorization_code, refresh_token, urn:ietf:params:oauth:grant-type:device_code, password]."

…which stands to reason because the grant is not available for enablement.

I’ve configured authenticators, policies, authorization servers, and applications according to whatever guidance is available and nothing lights this option up in application grant options.

I’m a superadmin of our development tenet and using OIE:
OP1 Preview Cell (US) Version 2024.12.0 E

Thanks for any help you can give me.

[jwamin]

Direct Authentication is enabled in my tenant.
I have also checked the global session policy, and checked any of the prerelease features I think might help me.

Custom Authorization Servers

doesn’t make mention of urn:okta:params:oauth:grant-type:webauthn as a valid scope. You can tell me, I can take it. The SDK was last updated earlier this year so it’s possible that it’s just unavailable, but I think this should be more clearly explained.