IBM Support

FIDO2 (YubiKey) two-factor authentication configuration

How To


Summary

FIDO2 (Fast Identity Online, second edition) is an open authentication standard that uses physical devices for authentication. IBM Security Secret Server uses it for two factor authentication (2FA) with FIDO2 providing the second authentication after a normal password entry—any FIDO2-enabled user attempting access to a Secret Server (SS) account must have a FIDO2 device in hand. The device eliminates many password-related issues, such as phishing and man-in-the-middle attacks. It also speeds up the long on process over callback or texting 2FA.

YubiKey is a FIDO2-compliant product series from Yubico, a commercial company. The following two devices are suggested —YubiKey 5 Series and Security Key by Yubico.

Document Location

Worldwide

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSWHLP","label":"IBM Security Secret Server"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
30 April 2019

UID

ibm10875624

Page Feedback