Yubico OATH integration
This document describes the integration of Yubico OATH keys.
Prerequisites
- Prepare the system for hardware token import (see document Import hardware tokens)
- Run the scenario Username, Password & Token generated OTP or Username & Token generated OTP depending on your authentication needs
- Set up PhenixID Self Service to enable enrollment of tokens
Configure the server for Yubikeys
Open the file phenix-store.json located in <Phenix server root>/config/ and add the lines below marked as bold/red.
{
      "name" : "TokenValidationValve",
      "config" : {
        "provided_otp_param_name" : "{{request.User-Password}}",
        "check_yubikey" : "true",
        "otp_length" : "6"
      }
}Note: otp_length must match the length of the provided otp from the yubikey tokens.
