Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unsupported Factor Type: webauthn with YubiKey 5 #162

Open
JacobWeyer opened this issue Apr 19, 2021 · 2 comments
Open

Unsupported Factor Type: webauthn with YubiKey 5 #162

JacobWeyer opened this issue Apr 19, 2021 · 2 comments

Comments

@JacobWeyer
Copy link

Is your feature request related to a problem? Please describe.
The yubikey 5 seems to have a factortype of webauthn via Okta

Describe the solution you'd like
Ideally we'd just support this factorType. If someone with more knowledge can point me in the right direction with webauthn/yubikey stuff I'd be happy to make a PR/

Describe alternatives you've considered
Not using Yubikey, but my company is starting to migrate towards these being more common.

Additional context

DEBUG - Setting AWS role to arn:aws:iam::065123698216:role/Role
DEBUG - Setting AWS partition to AwsPartition.AWS
INFO - No existing credentials found. Requesting new credentials.
INFO - App Link set as: https://company.okta.com/home/amazon_aws/0oGA2fw6hweX10H4ZO357/141
INFO - Authenticating to: company.okta.com
INFO - Authenticating as: user
Enter password: 
ERROR - Unsupported factorType: webauthn
MFA required, but no supported factors enrolled! sys.exiting.

removed some company info from the above

@darshan-mandhane
Copy link

darshan-mandhane commented Jul 25, 2022

I am also facing the issue with latest version of okta-awscli.

DEBUG - Setting AWS role to arn:aws:iam::304069618367:role/role
INFO - Authenticating to: xxxxx.okta.com
INFO - Authenticating as: xxxx@xxx.com
Enter password:
DEBUG - Setting MFA factor to OKTA
INFO - App Link set as: https://xxxxx.okta.com/home/amazon_aws/0oa25auwpIym2eSGi4h6/272
ERROR - Unsupported factorType: webauthn
MFA required, but no supported factors enrolled! Exiting.

@JacobWeyer - did you find any solution on this?

@kholia
Copy link

kholia commented Jul 25, 2023

Hi Folks - I have #221 PR open now which adds support for FIDO2 YubiKey(s).

Can you please test this PR, and provide some feedback? Thanks!

CC @darshan-mandhane @JacobWeyer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants