Search code examples
securityjenkinsyubikey

Is it possible to configure jenkins to use a hardware key for sign in?

I have a usb yubikey which I use for ssh and to log in on some websites.

Can I configure my jenkins server to allow for and force sign in using a yubikey too? I feel like that would be much more secure than a password.

Solution

  • We have implemented https://saaspass.com/.

    It uses a SAML plugin in Jenkins and then we use our mobile phones as a hardware key but if you have a YubiKey with NFC / USB-C mobile compatible you could use that in addition, so it becomes MFA.

    We disabled the SMS version but saaspass does allow you to configure which authentication options you want enabled.