{"id":76356,"date":"2023-06-05T13:11:27","date_gmt":"2023-06-05T17:11:27","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=76356"},"modified":"2024-07-22T17:12:45","modified_gmt":"2024-07-22T21:12:45","slug":"set-up-yubico-authenticator","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator","title":{"rendered":"Set Up Yubico Authenticator"},"content":{"rendered":"\n<p>YubiKeys can be used for Multi-factor authentication (MFA) to the JumpCloud\u00ae User Portal. Yubico Authenticator for Desktop can be used with Windows\u00ae and Mac\u00ae machines.<\/p>\n\n\n\n<p><strong>Considerations<\/strong>:<\/p>\n\n\n\n<ul>\n<li>You can use the YubiKeys listed\u00a0<a href=\"https:\/\/support.yubico.com\/hc\/en-us\/articles\/360013717520-Yubico-Authenticator-Guide\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>\u00a0with the Yubico Authenticator for Desktop.\u00a0<a href=\"https:\/\/www.yubico.com\/products\/identifying-your-yubikey\/\" target=\"_blank\" rel=\"noreferrer noopener\">Identify your YubiKey<\/a>.<\/li>\n\n\n\n<li>You can&#8217;t use YubiKeys in the Security Key series for JumpCloud TOTP MFA. YubiKeys in the Security Key series don&#8217;t support time-based one-time password (TOTP).<\/li>\n\n\n\n<li>YubiKeys used with JumpCloud TOTP MFA can&#8217;t be used with JumpCloud WebAuthn MFA. For WebAuthn MFA, use the YubiKeys in the Security Key series. Learn more: <a href=\"https:\/\/jumpcloud.com\/support\/set-up-webauthn\" target=\"_blank\" rel=\"noreferrer noopener\">Set Up WebAuthn<\/a>.<\/li>\n<\/ul>\n\n\n\n<p><strong>Prerequisites<\/strong>:<\/p>\n\n\n\n<ul>\n<li>The procedure outlined in this article uses a YubiKey that can be inserted into a USB or USB-C port. The following Yubikeys can be inserted into USB or USB-C drives:\n<ul>\n<li>YubiKey 4C<\/li>\n\n\n\n<li>YubiKey 4C Nano<\/li>\n\n\n\n<li>YubiKey 5C<\/li>\n\n\n\n<li>YubiKey 4C Nano<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Setting Up Yubico Authenticator<\/h2>\n\n\n\n<p>The following procedure includes steps to be completed by both JumpCloud administrators and JumpCloud users. We recommend that administrators observe users as they complete the user-specific steps in this procedure.<\/p>\n\n\n\n<ol>\n<li>Requiring MFA for users &#8211; JumpCloud admin<\/li>\n\n\n\n<li>Downloading and installing the Yubico Authenticator for Desktop application on your Windows and macOS machines &#8211; JumpCloud user or admin<\/li>\n\n\n\n<li>Determining the state of the YubiKey &#8211; JumpCloud user<\/li>\n\n\n\n<li>Setting up YubiKey MFA in JumpCloud &#8211; JumpCloud user<\/li>\n\n\n\n<li>Setting up YubiKey MFA in Yubico Authenticator &#8211; JumpCloud user<\/li>\n<\/ol>\n\n\n\n<p>After you complete the procedure, you can <a href=\"#2FA\">use YubiKey as a second factor for MFA<\/a>.<\/p>\n\n\n\n<p><strong>To set up Yubico Authenticator MFA on a Mac or Windows device<\/strong>:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">(JumpCloud Admin) Require MFA for users<\/h3>\n\n\n\n<ol>\n<li>In the JumpCloud Admin Portal, go to the <strong>User Security Settings and Permissions<\/strong> sections of a user\u2019s <strong>Details<\/strong> tab.<\/li>\n\n\n\n<li>Select <strong>Require Multi-factor Authentication on User Portal<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>After you select this option, you can apply an enrollment period for the user as needed. Learn more about enrollment periods: <a href=\"https:\/\/jumpcloud.com\/support\/configure-mfa-for-org\" target=\"_blank\" rel=\"noreferrer noopener\">Configure MFA for Your Org<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"3\">\n<li>Click <strong>save user<\/strong>. Users with MFA enabled for their account have an orange unlocked padlock icon in the<strong> TOTP MFA Status<\/strong> column of the JumpCloud Admin Portal Users list.<\/li>\n\n\n\n<li>After you save, the user receives an email message from JumpCloud-Notifications (<a href=\"mailto:notifications@jumpcloud.com\">notifications@jumpcloud.com<\/a>), with the subject &#8220;TOTP MFA Now Enabled on your JumpCloud Account.&#8221; Users can click a link in this email or log in to the JumpCloud User Portal to set up TOTP MFA for their account.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">(JumpCloud&nbsp;User or Admin) Download and install the Yubico Authenticator for Desktop<\/h3>\n\n\n\n<p>If a user doesn&#8217;t have administrator privileges to install applications on their machines, the JumpCloud admin will have to install the Yubico Authenticator for Desktop application for the user.&nbsp;<\/p>\n\n\n\n<ol>\n<li>Download the Yubico Authenticator application from <a target=\"_blank\" href=\"https:\/\/www.yubico.com\/products\/services-software\/download\/yubico-authenticator\/\" rel=\"noreferrer noopener\">https:\/\/www.yubico.com\/products\/services-software\/download\/yubico-authenticator\/<\/a>.<\/li>\n\n\n\n<li>After downloading completes, install the application on the machine.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">\u200b(JumpCloud User) Determine the state of the YubiKey<\/h3>\n\n\n\n<ol>\n<li>Open the Yubico Authenticator for Desktop application on the Windows machine. The authenticator application shows a message that reads, &#8220;No YubiKey detected.&#8221;<\/li>\n\n\n\n<li>Insert the Yubikey into a USB port. <\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Mac &#8211; If Apple\u2019s Keyboard Setup Assistant launches on your macOS machine, close the window.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"3\">\n<li>If the Yubikey is new, the Yubico Authenticator application shows a message that reads &#8220;No credentials found.&#8221; Users create a new set of credentials in <a href=\"#step-5\">Set Up YubiKey MFA in Yubico Authenticator<\/a> below.<\/li>\n\n\n\n<li>If the Yubikey has been used previously, credentials for an existing user appear. If they key shown is currently in use by the user for other credentials, you can proceed with setting up YubiKey MFA for the user.<\/li>\n\n\n\n<li>Otherwise, reset the key by selecting <strong>Reset<\/strong> from the Yubico Authenticator <strong>File<\/strong> menu. You are warned that this action can\u2019t be undone.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">(JumpCloud User) Set Up YubiKey MFA in JumpCloud<\/h3>\n\n\n\n<ol>\n<li>Log in to the JumpCloud User Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com<\/a>.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Set Up Authenticator App.<\/strong><\/li>\n\n\n\n<li>On the Set Up TOTP MFA Authentication dialog, click&nbsp;<strong>Continue<\/strong>.<\/li>\n\n\n\n<li>You are provided with a QR code and a long, alphanumeric TOTP key.&nbsp;You can either select and copy the key or use the Yubico Authenticator <strong>File &gt; Scan QR Code<\/strong> option.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"step-5\">(JumpCloud User) Set Up YubiKey MFA in Yubico Authenticator<\/h3>\n\n\n\n<ol>\n<li>Open the Yubico Authenticator application.<\/li>\n\n\n\n<li>From the&nbsp;<strong>File<\/strong>&nbsp;menu, select&nbsp;<strong>New Credential<\/strong>.<\/li>\n\n\n\n<li>In the New Credential dialog:\n<ul>\n<li>\u200bFor&nbsp;<strong>Issuer<\/strong>, enter&nbsp;<strong>JumpCloud User<\/strong>.<\/li>\n\n\n\n<li>For&nbsp;<strong>Account name<\/strong>, enter the user&#8217;s email address.<\/li>\n\n\n\n<li>For&nbsp;<strong>Secret Key<\/strong>, paste the TOTP key that was previously copied from the JumpCloud User Portal.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Save Credential<\/strong>.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>In your browser, return to the JumpCloud User Portal Setup Multifactor Authentication dialog. <\/li>\n\n\n\n<li>Enter a subsequent pair of six-digit codes shown in the Yubico Authenticator application dialog. After you enter the six-digit codes, you are logged into JumpCloud and the Multifactor Setup Complete dialog appears.<\/li>\n\n\n\n<li>In the JumpCloud Admin Portal, the user now has a green locked padlock icon in the&nbsp;<strong>TOTP<\/strong>&nbsp;<strong>MFA Status&nbsp;<\/strong>column.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"2FA\">Using YubiKey as a Second-Factor for MFA<\/h2>\n\n\n\n<p>After Yubico Authenticator MFA is set up for a JumpCloud user, they can use their YubiKey to get a TOTP to <a href=\"https:\/\/support.yubico.com\/hc\/en-us\/articles\/360013789259-Using-Your-YubiKey-with-Authenticator-Codes\" target=\"_blank\" rel=\"noreferrer noopener\">log in to applications that require MFA<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>YubiKeys can be used for Multi-factor authentication (MFA) to the JumpCloud\u00ae User Portal. Yubico Authenticator for Desktop can be used [&hellip;]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2908,2854],"support_tag":[],"coauthors":[2838],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Set Up Yubico Authenticator - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to set up and enable a Yubico authenticator for use as an MFA factor.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Set Up Yubico Authenticator\" \/>\n<meta property=\"og:description\" content=\"Learn how to set up and enable a Yubico authenticator for use as an MFA factor.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-22T21:12:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"jenniferklein\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator\",\"url\":\"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator\",\"name\":\"Set Up Yubico Authenticator - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:11:27+00:00\",\"dateModified\":\"2024-07-22T21:12:45+00:00\",\"description\":\"Learn how to set up and enable a Yubico authenticator for use as an MFA factor.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Set Up Yubico Authenticator\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Set Up Yubico Authenticator - JumpCloud","description":"Learn how to set up and enable a Yubico authenticator for use as an MFA factor.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator","og_locale":"en_US","og_type":"article","og_title":"Set Up Yubico Authenticator","og_description":"Learn how to set up and enable a Yubico authenticator for use as an MFA factor.","og_url":"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator","og_site_name":"JumpCloud","article_modified_time":"2024-07-22T21:12:45+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes","Written by":"jenniferklein"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator","url":"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator","name":"Set Up Yubico Authenticator - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:11:27+00:00","dateModified":"2024-07-22T21:12:45+00:00","description":"Learn how to set up and enable a Yubico authenticator for use as an MFA factor.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/set-up-yubico-authenticator#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Set Up Yubico Authenticator"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76356"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/204"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76356\/revisions"}],"predecessor-version":[{"id":113162,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76356\/revisions\/113162"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=76356"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=76356"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=76356"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=76356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}