Strong Authentication OpenID & Yubico

Conseil en technologies

Strong Authentication & OpenID

Using YUBICO & Clavid

17-2-2009Sylvain Maret

Conseil en technologieswww.maret-consulting.ch

Introduction

This cookbook shows you how to use an YubiKey for Strong authentication with OpenID

We will use Clavid as a OpenID provider (IDP) This solution is really easy to implement No need to install software You just an YubiKey from Yubico

About Yubico

Provide a USB Device for Strong Authentication Use AES Standard No need to install software (driver) Not a expensive solution Provide a One Time Password event based

For more information: http://www.yubico.com

About Clavid

A Swiss company providing OpenID based on:

Swiss Post Digital Certificate All SSL Client Digital Certificate X509 Yubikey Axsionics And Username & Password (no Strong

Authentication……) And Soon more !

Let’s define the scenario

Use a Strong Authentication PIN Code and an Yubikey

Use OpenID Clavid.ch http://www.clavid.ch/

Use Plaxo to test this example

Connect to Plaxo and choose OpenID

Enter your OpenID Account from Clavid.ch

You are redirected to Clavid.ch: Your Identity Provider

Enter you PIN Code and Put your Finger on your Ubikey

Ok, now you are redirected to Plaxo: That it

If you want to force Strong Authentication with Yubikey

"Le conseil et l'expertise pour le choix et la mise

en oeuvre des technologies innovantes dans la sécurité

des systèmes d'information et de l'identité numérique"

Strong Authentication OpenID & Yubico

Technology

Transcript of Strong Authentication OpenID & Yubico

OpenID Connect Conformance Profiles v3 · 1 OpenID Connect Conformance Profiles v3.0 OpenID Connect Working Group, OpenID Foundation June 28, 2018 1. Introduction This document defines

OpenID Security

Just Another Weather Application Evaluating the OSIsoft ...€¦ · • OAuth 2.0 & OpenID • Authentication by external identity provider • Authorization handled by configuring

Authentication Identity · 2020. 6. 10. · Shibboleth OAuth / OpenID Connect. Central Authentication Service Developed at Yale Now supported by Apero Foundation Used at many UC Campuses.

Mobile authentication and authorisation: OpenID and OAuth

YubiKey Mac OS X Login Guide - Yubico | Trust the Net … document describes how to enable a YubiKey to protect your Mac OS X login using Yubico Pluggable Authentication Module (PAM).

Using OpenID/OAuth to access Federated Data Servicesbenno/Talks/goessp201105.pdf · 2011-05-10 · web client. Combined with OpenID, it allows lightweight mashup authentication, i.e.

AMQP Claims-based Security Version 1.0 · Web viewStep (1) might be using the OpenID Connect 1.0 [OpenID] authentication protocol. Step (2) might be using the OAuth 2.0 [RFC6749]

YubiKey Standard and YubiKey Nano - Yubico | Trust the Net ... · YubiKey Standard and YubiKey Nano are USB devices supporting multiple authentication and cryptographic protocols.

Programming YubiKeys for Okta - Yubico | Trust the Net ... · Programming YubiKeys for Okta Adaptive Multi-Factor Authentication Page 5 of 14 Generating a YubiKey Secrets File To

Decentralized Authentication in OpenStack Novamaguire/DEGREE-PROJECT... · Decentralized Authentication in OpenStack Nova Integration of OpenID Master’s Thesis Espoo, June 2011

OpenID Connect - Nat Sakimura at OpenID TechNight #7

Introduction OpenID Authentication 2.0 Revival

Yubico YubiHSM Monitor if the AEAD is changed, ... yubico. Yubico YubiHSM Monitor yubico. Yubico YubiHSM Monitor yubico. yubico. Test utility for the YubiHSM ...

06 - Kubernetes continued€¦ · OpenID Connect • Enables third-party authentication • Google, Facebook, Twitter, … • Kubernetes can use OpenID Connect together with RBAC

Yubico Authenticator User's Guide · Yubico Authenticator User's Guide © 2016 Yubico. All rights reserved. Page 4 of 23 Troubleshooting ..... 22

RECENTEVOLUTIONSINTHE OAUTH 2.0 AND OPENID … · 2020-06-19 · Consulting services on security, Oauth2.0, ... User authentication Read & write data OpenID Connect OAuth 2.0 @PhilippeDeRyck

Secure Authentication · Yubico Enterprise Authentication 10 Cloud Services On-premises Services Smart Card OTP Smart Card FIDO U2F FIDO U2F OTP FIDO U2F Employee Admins Privileged

OpenID TechNight #6 - OpenID on Smart.fm

Introduction to OpenID Foundation...May 21, 2020 · Introduction to OpenID Foundation 2020-05-21 OpenID Foundation Virutal Workshop. OpenID Foundation A Non-proﬁt International