FIDO2 (Yubikey et al) support

kelly.clowers

I don't think OpenVPN server yet has built in support for FIDO2, but there are lots of ways to add it, plenty of guides out there...
but no option for it with OpenVPN Cloud

FIDO2 being one of the easiest and most secure forms of 2FA/MFA, this seems like a big oversight. Any timeline estimate for when it might be available? Is it being planned at least?

openvpn_inc

Hi There,

Unfortunately OpenVPN Cloud doesn't support yubikey at the moment. However, if you use SAML, we can enable authentication in native browser for your account. So if your IdP supports yubikey, you will be able to use yubikey like on any other web portal.

kelly.clowers wrote I don't think OpenVPN server yet has built in support for FIDO2, but there are lots of ways to add it, plenty of guides out there...
but no option for it with OpenVPN Cloud

FIDO2 being one of the easiest and most secure forms of 2FA/MFA, this seems like a big oversight. Any timeline estimate for when it might be available? Is it being planned at least?

Regards,
Crowley

openvpn_inc

Hello,

Just wanted to update here that now since the release of OpenVPN Connect v3.3 for Windows, we now support PKCS11 hardware tokens such as the Yubikey. More details can be found here:
https://openvpn.net/vpn-server-resources/support-of-pkcs11-physical-tokens-for-openvpn-connect/

Kind regards,
Johan