Re:Hackers claim to have breached Okta systems
by mkdirp on Tuesday March 22, 2022 @10:53AM
(#30766809)
> I might also add that Okta DOES NOT support any form of physical 2FA (e.g.: yubikeys), only software-based ones.
Not sure where you got this from, but we've been using yubikeys for a few months now. They even allow policies to only allow physical 2FA methods.
Re:Hackers claim to have breached Okta systems
by Sohcahtoa82 on Tuesday March 22, 2022 @11:14AM
(#30767059)
> I might also add that Okta DOES NOT support any form of physical 2FA (e.g.: yubikeys), only software-based ones.
You might be operating under outdated information. I absolutely use a YubiKey with my Okta account.
Re:Hackers claim to have breached Okta systems
by sleepybrett on Tuesday March 22, 2022 @01:24PM
(#30768888)
They, in fact, support many forms of 2fa, your org just doesn't have them enabled.
No. It's a tricky situation too, since even if one did receive such email, I won't look at work email until working hours. So even with such a notification, if you logged in on friday 20:00, you've over 50 hours to do your work.
I might also add that Okta DOES NOT support any form of physical 2FA (e.g.: yubikeys), only software-based ones.