Yubico OATH integration
This document describes the integration of Yubico OATH keys.
Prerequisites
- Prepare the system for hardware token import (see document Import hardware tokens)
- Run the scenario Username, Password & Token generated OTP or Username & Token generated OTP depending on your authentication needs
- Set up PhenixID Self Service to enable enrollment of tokens
Configure the server for Yubikeys
Open the file phenix-store.json located in <Phenix server root>/config/ and add the lines below marked as bold/red.
{
"name" : "TokenValidationValve",
"config" : {
"provided_otp_param_name" : "{{request.User-Password}}",
"check_yubikey" : "true",
"otp_length" : "6"
}
}
Note: otp_length must match the length of the provided otp from the yubikey tokens.