Two-Factor Authentication

[oliverands]

I am using a YubiKey. About 20-25% of the times I attempt to log in, I get the error screen shown in the attached .jpg after I touch the key to generate the code. I retry from this error screen, and I always get in on the second attempt. Any idea why I'm getting this odd error (I only have one YubiKey, so it can't be that I'm using the incorrect one) and why the failure rate on the first attempt with the YubiKey is so high?

[Rick Wilson]

Todd,

What browser is this happening in?

[oliverands]

Todd,

What browser is this happening in?

Firefox.

[TheTeaTable]

Yeah I think a YubiKey is the best option in that case (and actually in general)

Thanks Rick. Sorry if I missed this somewhere in the instructions, but can a single Yubikey be used to sign into multiple user accounts? I'm guessing only one Yubikay can be assigned to any individual account.

[Rick Wilson]

oliverands Todd what OS are you running? We saw this once during testing (only in FF) but could never reproduce it.

[Rick Wilson]

TheTeaTable You can login to multiple accounts with a single YubiKey

[oliverands]

oliverands Todd what OS are you running? We saw this once during testing (only in FF) but could never reproduce it.

Windows 10, version 1803.

I can't reliably reproduce it myself. But it happens one out of every four or five login attempts for me.

[alphabet]

@oliverands:

I had a similar issue and it sounds like the factory programmed Yubico OTP credential may have been overwritten. To program a new Yubico OTP credential, you can use the steps in the Yubikey for YubiCloud configuration guide:

https://support.yubico.com/support/solutions/articles/15000006463-yubikey-for-yubicloud-configuration-guide

and personalization tool:

https://www.yubico.com/products/services-software/personalization-tools/use/

It doesn't take long once you figure it out.

[alphabet]

Also check that the Yubikey is tight in the USB receptor.

[lesliekirk]

LOL - what a great idea for MivaCon swag - a Yubikey!

[amotostuff]

Any one know how Two-Factor auth affects Stone Edge order managers ability to communicate with Miva since it uses a username/password.

[Rick Wilson]

Yes there are steps you need to take prior to the upgrade, contact our support team for assistance.

[KayfabeRockStar]

What if you've already upgraded and then discover these issues with Stone Edge? A warning would have been nice. I emailed Miva support.

[Rick Wilson]

Call support, takes a few mins to fix on our end. I believe we did warn about exactly this in our emails.

[lesliekirk]

I believe we did warn about exactly this in our emails.

I will say, you sure did, but it really surprised me the number of store owners that I work with that didn't "see" it.