Page 1 of 1

FIDO2 (Yubikey et al) support

Posted: Fri May 28, 2021 6:48 pm
by kelly.clowers
I don't think OpenVPN server yet has built in support for FIDO2, but there are lots of ways to add it, plenty of guides out there...
but no option for it with OpenVPN Cloud

FIDO2 being one of the easiest and most secure forms of 2FA/MFA, this seems like a big oversight. Any timeline estimate for when it might be available? Is it being planned at least?

Re: FIDO2 (Yubikey et al) support

Posted: Wed Jun 02, 2021 9:38 pm
by openvpn_inc
Hi There,

Unfortunately OpenVPN Cloud doesn't support yubikey at the moment. However, if you use SAML, we can enable authentication in native browser for your account. So if your IdP supports yubikey, you will be able to use yubikey like on any other web portal.
kelly.clowers wrote:
Fri May 28, 2021 6:48 pm
I don't think OpenVPN server yet has built in support for FIDO2, but there are lots of ways to add it, plenty of guides out there...
but no option for it with OpenVPN Cloud

FIDO2 being one of the easiest and most secure forms of 2FA/MFA, this seems like a big oversight. Any timeline estimate for when it might be available? Is it being planned at least?
Regards,
Crowley

Re: FIDO2 (Yubikey et al) support

Posted: Thu Jul 01, 2021 3:25 pm
by openvpn_inc
Hello,

Just wanted to update here that now since the release of OpenVPN Connect v3.3 for Windows, we now support PKCS11 hardware tokens such as the Yubikey. More details can be found here:
https://openvpn.net/vpn-server-resource ... n-connect/

Kind regards,
Johan