Yubico YubiKey 4 (PRIME DAY offer)

[kayakbabe]

So what about when we need to do support via an iPad or iPhone? A yubikey doesn’t work. I read they are working I. A version that will but might not be out yet.

[ILoveHostasaurus]

There is an NFC-enabled version of the Yubikey 4 allowing you to use it via Apple device by moving it near the device.

[PCINET - Andreas]

Just making sure, only YubiKey 4 works the other cheaper YubiKeys don't work, right?

[ILoveHostasaurus]

The current release of Merchant requires the Yubi 4 because it uses the Yubicloud features. Once Empresa 5.32 comes out, soon, you could use that Yubi Security Key because at that point all U2F tokens would be supported, however, that limits you to Chrome or Firefox.

[Bruce - PhosphorMedia]

" limits you to Chrome or Firefox."

You say that like its a bad thing :)

[lesliekirk]

" limits you to Chrome or Firefox."

You say that like its a bad thing :)

I'm a fan of Brave, but I also have Safari.

[AHerb]

• Administrators and users with a developer license are now required to enable two-factor authentication. When logging in, if they do not have two-factor enabled, they will be directed to a new screen that forces them to enable two-factor authentication.

Are you planning to enforce this? As currently admins that are already exist are not forced to enable two-factor.
9.10.01 installed

[AHerb]

I'm a fan of Brave...

[Rick Wilson]

Are you planning to enforce this? As currently admins that are already exist are not forced to enable two-factor.
9.10.01 installed

Yes, in 9.12 2FA will be enforced for all Admin users.

In 9.11 Browser Authentication will be enforced for all users

9.10 enforces 2FA and Browser Authentication for new users and provides a process for existing users to do things like add email addresses, etc.. in preparation for 9.11 and 9.12.

9.11 ships next week on the 14th and 9.12 will ship roughly 4-6 weeks later.

[lesliekirk]

lol

[oliverands]

ILoveHostasaurus wrote:

There is an NFC-enabled version of the Yubikey 4 allowing you to use it via Apple device by moving it near the device.

I was just looking at the Yubikey site, and it seems to equivocate somewhat about whether the NFC functionality works only with Android devices or whether it works with iOS devices as well.

Is anyone using a Yubikey to log into Miva on an iPhone or iPad? If so, which model of the Yubikey are you using? And does the iOS version or iPhone/iPad model make a difference as to whether it will work with a Yubikey?

For anyone who is already using a Yubikey, any recommendation on the model to purchase?

And, finally, once TFA is enabled for admin users in the next version of Miva, will it be possible to start using Google Authenticator and later change to Yubikey on the same account, or once an option is selected that's what the account will need to use forever?

[ILoveHostasaurus]

It will work with iOS devices that are recent enough to have NFC support (past few years, possibly 7 and newer I believe), and iOS 11. The yubikey 4 with nfc that's about $10 more is the one that we've tested. You can change 2fa methods via the store admin as either an admin (disable 2fa for a user and they'll be forced to reenable on next login), or for oneself.

[oliverands]

Thanks David. Is it safe to assume that if the device is able to use contactless Apple Pay at the point of sale (which I think uses NFC) it will work with a Yubikey?

[ILoveHostasaurus]

Yep I believe it does use NFC so that should be a good way to tell. Only recent iOS releases allowed third party use of it though, which is why the iOS 11 requirement.

[aubreyd]

Found answer.