Cross Origin can be enabled or disabled for any policy through this system Option. If you enable crossOrigin, it allows the server to authenticate a user from any one of the allowed origins from the list provided in the "allowedOrigins."

For instance, when a user registers with a RP with an ID of "example.com," an authenticator registered on example.com can only authenticate on rpid with same domain as "example.com." However, if you enable crossOrigin and provide "login.com" as one of the allowed Origins, then a user registered on example.com can also authenticate when he logins through "login.com" domain.

"crossOrigin" : {
         "enabled": true | false,
         "allowedOrigins": []
      }