vlaci / openconnect-sso

Wrapper script for OpenConnect supporting Azure AD (SAMLv2) authentication to Cisco SSL-VPNs
GNU General Public License v3.0
278 stars 117 forks source link

use FIDO2 security key for 2FA #177

Open kkulshre opened 1 month ago

kkulshre commented 1 month ago

This is an attempted solution to https://github.com/vlaci/openconnect-sso/issues/176 based on the examples released with Qt 6.7.0 (simplebrowser) for authentication using FIDO2 security key.

When the QWebEngine detects a QWebEngineWebAuthUXRequest it is handled by a UI Widget to ask the user for their PIN and collect the security token.

The minimum required Qt version is 6.7.0 for this to work.

Tested using a M365 account using a Yubikey 5C.