In a previous blog, It's Time to Hang Up on Phone Transports for Authentication, I wrote about the vulnerabilities of multifactor authentication (MFA) mechanisms such as SMS and voice. A recent MFA r...
Updated Jul 17, 2023
Version 2.0
Blog Post
Imo the most asked use case from our customers as partners is: When are we going to use the phone as a Fido2 security key? They want to attach the key to their company phones permanently and roam around with their account. Currently only one vendor is offering this and their demand is insane. Would be great if the authenticator app supported talking to any attached fido2 key and offer a qr code to scan if on a different device like IDmelon is doing. The only downside is that its a klunky usb dongle not as sleek and tiny as a YubiKey nano for instance that wont get lost hence why this needs to be democratized to all sort of fido keys even nfc ones you could allowed to be proxied through the authenticator app. I hope Microsoft does something with this idea as it would make their customers VERY happy.