
charbela.59753 (Customer) asked a question.
Hi,
Would like the know what's the recommended approach to setup a YubiKey. Should we go through WebAuthn or Yubikey MFA authenticators, and what's the difference in both approaches?
Also, we would like to know what are the supported FIDO2 devices in Okta. We can't get to that list since we we don't have WebAuthn enabled at the moment it seems we need to contact support to have that features. We did some research but we couldn't find the FIDO2(webAuthn) devices that Okta supports. Can you help with please?
Thanks,
Charbel

Hello @charbela.59753 (Customer) Thank you for reacting out to our Community!
Both Yubikey and FIDO2 are good MFA approaches for users. FIDO2 is a bit simpler to setup as you just need to enable it from the Admin console and for Yubikey requires you additional configuration.
Please see our documentations on this matter below as well as supported devices for FIDO2:
https://help.okta.com/en-us/content/topics/security/mfa/yubikey.htm
https://help.okta.com/en-us/content/topics/security/mfa-webauthn.htm
https://help.okta.com/en-us/content/topics/security/mfa/webauthn-compatibility.htm
Community members help others by clicking Like or Select as Best on responses. Try it today.
Ask Away: OIG Product Experts Answer Your Questions Thru Thur., Dec 14
Earn Today: New Okta Community Badges Have Arrived