Additionally, some clients and servers allow redirection of hardware authentication devices, which allows for use of the hardware devices after successfully connecting to the remote session, regardless of whether those devices were used to authenticate to the session to begin with. Smart cards and FIDO2/WebAuthn redirection are only supported for some clients and some remote hosts. A native client (that utilizes MSAL) exists for each supported client platform. Additionally a web client is available. Remote sign-in to Azure Active Directory joined AVD Session Hosts In Hybrid environments, enables SSO to On-Premises Integrated Windows Authentication (IWA) applications. The YubiKey seems intimidating, but it doesn't have to be. Set up your apps to use it, and you'll find that it's actually easier than other forms of two-factor authentication. Take it from someone who put it off for a long time—it's worth it.

One of the foundational pieces for Yubico Authenticator on desktop is the YubiKey Manager command line tool (usually referred to as ‘ykman’). To support this new app we also needed to improve the library aspects of ykman, which resulted in the release of ykman 5.0. Aside from being beneficial for use in Yubico Authenticator 6, ykman also gained some new features of its own, including much better scripting capabilities. You can now create and run your own Python scripts to configure YubiKeys, and run them with ykman.

Remote sign-in to Hybrid Azure Active Directory joined AVD Session Hosts

As this naming has begun to proliferate, we have received many inquiries from our customers and partners on defining passkeys, how these work as additional authentication options, and what expanding WebAuthn/FIDO authentication options may look like, and we cover this evolving story below. Sign in to Windows servers that have been joined to a traditional Active directory domain as well as Azure AD joined via Remote Desktop. The use cases outlined in this document describe specific scenarios that are referred to in Yubico’s Use Case Guides. While this listing isn’t exhaustive, it describes the most common scenarios that an end user is likely to encounter in the environments described by our use case guides. Not all of these use cases will be possible with every function that the YubiKey supports. To find out what functions support what use cases, consult the use case guide for the environment that best matches yours.

Azure Virtual Desktop (AVD) is a specialized virtual desktop environment offered by Microsoft. Although it functions similarly to traditional remote desktop, it requires a separate client, and utilizes an Azure service for maintaining the resources that can be logged in to, as well as an additional software agent that makes a system an “Azure AVD Session Host”.The MSAL library supports all authentication methods that can be used to log into Azure AD, including mTLS for CBA and WebAuthn for FIDO2. There are some terms that are changing, and these will hopefully be easier to understand for users and developers alike.

Local sign in to Windows 10 and 11 workstations that have been joined to a traditional Active Directory domain.There's a lot more nuance than this, of course. But for the most part, you just need to know that it's 2FA that's more secure and easier to use. Why is a YubiKey better than other 2FA?