Integrating a FIDO U2F-Based Two-Factor Authentication with LinOTP
summary
Shows how LinOTP’s admin API maps to FIDO U2F register and authenticate flows by listing concrete JSON fields (challenge, transactionId, keyHandle, version) and the JavaScript calls navigator.u2f.register and navigator.u2f.sign. Demonstrates a VM demo that registers a YubiKey using the P‑256 curve, returns status/value objects the server validates, and discusses Chrome-only support, USB/NFC/BLE transports, counter-based clone detection, and LinOTP’s handling of provisioning and lost-device workflows (with minor USB VM issues noted).
AI-written summary · about
chapters (8)
- 0:00Welcome
- 3:18Two-factor authentication basics
- 10:58FIDO U2F details
- 25:43U2F with LinOTP integration
- 38:45Live demo
- 43:54LinOTP management
- 51:46Security limits
- 54:29Summary & Q&A
related talks
30mHow FIDO U2F Security Keys Work
01h 14mWebAuthn: Theory and practice
24mOf Two Minds about Two-Factor: Understanding Everyday FIDO U2F Usability
49mOne token to rule them all
38mBreaking FIDO: Are Exploits in There?
33mSimple. Open. Mobile: A Look at the Future of Strong Authentication
41mUsing FIDO authentication to defend against account takeover
40mWebAuthn 201: How to FIDO