2 ms·

I'm OK with having a security key, and actually have one (YubiKey). But MS went out of their way to only allow using it under Windows for some reason. If you w

I'm OK with having a security key, and actually have one (YubiKey). But MS went out of their way to only allow using it under Windows for some reason. If you want to log in to Azure/Office 365 from a different OS, you have to use some other way. > especially when a company refuses to implement TOTP. They do have TOTP, though. It's called "Authenticator app". The one that does the push notification and is MS-only is called "Microsoft authenticator" in their list. This works both on my personal, basic "outlook.com" account and on my work Azure / Office 365 one. --- What I find funny is that for the personal account, the push notification seems better implemented: they send a code that's also on the screen, so you can know that you're approving the action you're currently doing. On the Office 365 subscription, I just get an "approve / cancel" box. This could probably be abused by someone knowing that I'm about to log in, since I have no way of knowing what I'm approving.

Xylakant 5y ago
> But MS went out of their way to only allow using it under Windows for some reason. If you want to log in to Azure/Office 365 from a different OS, you have to use some other way. According to Microsoft’s documentation, windows, macOS and Linux are all supported, but only edge and chrome on macOS and only chrome on Linux. https://docs.microsoft.com/en-us/azure/active-directory/authentication/fido2-compatibility https://docs.microsoft.com/en-us/azure/active-directory/auth... When we implemented this lately, we did find another somewhat annoying speedbump: If you use SAML-based SSO and log in with a yubikey, some SSO breaks since the application at the other end requires explicit password-based authentication. Fixing this requires assistance from the application provider who may be unwilling to fix this.
- vladvasiliu 5y ago
  Interesting, can confirm Chrome works on Linux. What's weird is that Teams on Linux does show the "sign in with security key" but it doesn't do anything.
deleted 5y ago
[deleted]

Xylakant 5y ago

> But MS went out of their way to only allow using it under Windows for some reason. If you want to log in to Azure/Office 365 from a different OS, you have to use some other way. According to Microsoft’s documentation, windows, macOS and Linux are all supported, but only edge and chrome on macOS and only chrome on Linux. https://docs.microsoft.com/en-us/azure/active-directory/authentication/fido2-compatibility https://docs.microsoft.com/en-us/azure/active-directory/auth... When we implemented this lately, we did find another somewhat annoying speedbump: If you use SAML-based SSO and log in with a yubikey, some SSO breaks since the application at the other end requires explicit password-based authentication. Fixing this requires assistance from the application provider who may be unwilling to fix this.

vladvasiliu 5y ago
Interesting, can confirm Chrome works on Linux. What's weird is that Teams on Linux does show the "sign in with security key" but it doesn't do anything.

deleted 5y ago

[deleted]