Strong Authentication & OpenID Using YUBICO & Clavid 17-2-2009 Sylvain Maret

Introduction This cookbook shows you how to use an YubiKey for Strong authentication with OpenID We will use Clavid as a OpenID provider (IDP) This solution is really easy to implement No need to install software You just an YubiKey from Yubico

This cookbook shows you how to use an YubiKey for Strong authentication with OpenID

We will use Clavid as a OpenID provider (IDP)

This solution is really easy to implement

No need to install software

You just an YubiKey from Yubico

About Yubico Provide a USB Device for Strong Authentication Use AES Standard No need to install software (driver) Not a expensive solution Provide a One Time Password event based For more information: http://www.yubico.com

Provide a USB Device for Strong Authentication

Use AES Standard

No need to install software (driver)

Not a expensive solution

Provide a One Time Password event based

For more information: http://www.yubico.com

About Clavid A Swiss company providing OpenID based on: Swiss Post Digital Certificate All SSL Client Digital Certificate X509 Yubikey Axsionics And Username & Password (no Strong Authentication……) And Soon more !

A Swiss company providing OpenID based on:

Swiss Post Digital Certificate

All SSL Client Digital Certificate X509

Yubikey

Axsionics

And Username & Password (no Strong Authentication……)

And Soon more !

Let’s define the scenario Use a Strong Authentication PIN Code and an Yubikey Use OpenID Clavid.ch http://www.clavid.ch/ Use Plaxo to test this example

Use a Strong Authentication

PIN Code and an Yubikey

Use OpenID

Clavid.ch

http://www.clavid.ch/

Use Plaxo to test this example

Connect to Plaxo and choose OpenID

Enter your OpenID Account from Clavid.ch

You are redirected to Clavid.ch: Your Identity Provider

Enter you PIN Code and Put your Finger on your Ubikey

Ok, now you are redirected to Plaxo: That it

If you want to force Strong Authentication with Yubikey

"Le conseil et l'expertise pour le choix et la mise en oeuvre des technologies innovantes dans la sécurité des systèmes d'information et de l'identité numérique"