Integrates with the Yubico cloud validation service to verify YubiKey hardware token one-time passwords (OTPs).
Getting Your Yubico API Credentials
- Go to https://upgrade.yubico.com/getapikey/.
- Enter your email address and the OTP from your YubiKey (tap the button while the cursor is in the field).
- Click Get API Key.
- Copy the Client ID and Secret Key displayed and enter them in the fields below.
Settings
- Client ID
- The numeric client ID provided by Yubico (e.g.
12345).
- Secret Key
- The HMAC secret key for signing validation requests. Stored encrypted at rest.
- Prompt To Setup
- When enabled, users without a registered YubiKey will be prompted to enrol one at next login.
- Allow Skip
- When enabled, users can skip YubiKey enrolment for a limited number of logins.
- Maximum Skips
- The maximum number of times a user can skip enrolment before it is enforced.
Get Yubico API Key