<html><body><div dir="ltr">
Thank you Scott! I needed to be reminded about YubiKeys’ “second slot” that can be used as an OTP generator. It’s some work for those users to set up, but they are in this situation because of their adamance not to use their phones in any way for 2FA. That’s also a solution for 2FA with SSH for example.</div><div dir="ltr"><br></div><div dir="ltr">David St Pierre Bantz</div><div dir="ltr"><br></div><div dir="ltr"><br></div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On 22Aug2022 at 11:11:16, "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" type="cite">
<div>
<div>
On 8/22/22, 3:02 PM, "users on behalf of IAM David Bantz via users" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br>... Yubikeys can be used to generate codes that Duo will accept.<br><br>-- Scott<br>
</div>
</div>
</blockquote>
</div></body></html>