This document summarizes how to use a YubiKey for strong authentication with OpenID through the identity provider Clavid. It describes Yubico as providing a USB device for one-time password authentication without software. Clavid supports digital certificates, YubiKeys, and username/password authentication. The scenario uses a PIN code and YubiKey for strong authentication through Clavid OpenID to log into Plaxo as a test case.

1. Strong Authentication & OpenID Using YUBICO & Clavid 17-2-2009 Sylvain Maret

2. Introduction This cookbook shows you how to use an YubiKey for Strong authentication with OpenID We will use Clavid as a OpenID provider (IDP) This solution is really easy to implement No need to install software You just an YubiKey from Yubico

3. About Yubico Provide a USB Device for Strong Authentication Use AES Standard No need to install software (driver) Not a expensive solution Provide a One Time Password event based For more information: http://www.yubico.com

4. About Clavid A Swiss company providing OpenID based on: Swiss Post Digital Certificate All SSL Client Digital Certificate X509 Yubikey Axsionics And Username & Password (no Strong Authentication……) And Soon more !

5. Let’s define the scenario Use a Strong Authentication PIN Code and an Yubikey Use OpenID Clavid.ch http://www.clavid.ch/ Use Plaxo to test this example

6. Connect to Plaxo and choose OpenID

7. Enter your OpenID Account from Clavid.ch

8. You are redirected to Clavid.ch: Your Identity Provider

9. Enter you PIN Code and Put your Finger on your Ubikey

10. Ok, now you are redirected to Plaxo: That it

11. If you want to force Strong Authentication with Yubikey

12. "Le conseil et l'expertise pour le choix et la mise en oeuvre des technologies innovantes dans la sécurité des systèmes d'information et de l'identité numérique"