Foxit, SSO, Duo, security key

[Cantor, Scott]

On 8/22/22, 3:02 PM, "users on behalf of IAM David Bantz via users" <users-bounces at shibboleth.net on behalf of users at shibboleth.net> wrote:

>    UA licensed Foxit. For users with only a security key (YubiKey) for Duo
> MFA, MFA fails at login, presumably because Foxit is using their own version
> of a browser that does not (directly) support keys/webauthn.  Anyone have
> a workaround for that (using either Shibboleth or Azure for SSO) other than
> using Duo bypass code?

I believe that if the answer to that weren't "no", WebAuthn would be broken, so I'm going to assume it's not and the answer has to be no.

You have to have a client that supports the protocol, you can't proxy it or fake it somehow.

Of course, there are non-WebAuthn approaches to "using a token" with Duo, Yubikeys can be used to generate codes that Duo will accept.

-- Scott