Strong Authentication OpenID & Yubico

MARET Consulting | 109, chemin du Pont-du-Centenaire | CH 1228 Plan-les-Ouates | Tél +41 22 727 05 57 | Fax +41 22 727 05 50 | www.maret-consulting.ch

Conseil en technologies

Strong Authentication & OpenID

Using YUBICO & Clavid

17-2-2009Sylvain Maret

Conseil en technologieswww.maret-consulting.ch

Introduction

This cookbook shows you how to use an YubiKey for Strong authentication with OpenID

We will use Clavid as a OpenID provider (IDP) This solution is really easy to implement No need to install software You just an YubiKey from Yubico


About Yubico

Provide a USB Device for Strong Authentication Use AES Standard No need to install software (driver) Not a expensive solution Provide a One Time Password event based

For more information: http://www.yubico.com


About Clavid

A Swiss company providing OpenID based on:

Swiss Post Digital Certificate All SSL Client Digital Certificate X509 Yubikey Axsionics And Username & Password (no Strong

Authentication……) And Soon more !


Let’s define the scenario

Use a Strong Authentication PIN Code and an Yubikey

Use OpenID Clavid.ch http://www.clavid.ch/

Use Plaxo to test this example


Connect to Plaxo and choose OpenID


Enter your OpenID Account from Clavid.ch


You are redirected to Clavid.ch: Your Identity Provider


Enter you PIN Code and Put your Finger on your Ubikey


Ok, now you are redirected to Plaxo: That it


If you want to force Strong Authentication with Yubikey


"Le conseil et l'expertise pour le choix et la mise

en oeuvre des technologies innovantes dans la sécurité

des systèmes d'information et de l'identité numérique"

Strong Authentication OpenID & Yubico

Technology

strong authentication

yubikey use openid

use plaxo

strong authentication

openid account

openid provider idp

yubico clavid

choix et