Versatile 2FA Single Sign-On with Keycloak and privacyIDEA

[henry]

@skug67

U2F is apparently still a work-in-progress for the Keycloak connector.

I don’t think it’s a Keycloak issue.
U2F should be avoided if possible, my understanding is

U2F with Freeradius

Hello, I was wondering if that scenario should work in theory. PI bound to Freeradius with privacyidea_radius.pm. I’ve successfully registered a Yubikey 4 as U2F Token in PI. Should it be possible to use that U2F token as an OTP-Token to authenticate at a third-party webservice (VMware UAG). The webservice is connected via the Freeradius server to PI and just asks after the OTP. I’ve also configured u2f facets but didn’t get it running. Thank you, Christoph

Unless 3.3 fixes everything

Features:
* New token type: WebAuthn/FIDO2 token (#1468)
* WebAuthn hardware tokens can now be used with privacyIDEA

privacyIDEA 3.3 pre release

Hello all, we are in the process of finishing the 3.3 release of privacyIDEA. You can install 3.3dev2 from the python package index or from the Ubuntu 18.04 community repository. You can find the changelog at github: