Issue
I have a usb yubikey which I use for ssh and to log in on some websites.
Can I configure my jenkins server to allow for and force sign in using a yubikey too? I feel like that would be much more secure than a password.
Solution
We have implemented https://saaspass.com/.
It uses a SAML plugin in Jenkins and then we use our mobile phones as a hardware key but if you have a YubiKey with NFC / USB-C mobile compatible you could use that in addition, so it becomes MFA.
We disabled the SMS version but saaspass does allow you to configure which authentication options you want enabled.
Answered By - Carl Bruiners
Answer Checked By - Marilyn (JavaFixing Volunteer)
