An empty result indicates that you have no affected users in your system.See the Limit User Impact section for details on what to do next. Any listed users are impacted by this issue.You will see a list of users using U2F authentication and their email addresses. Once you are at the mysql> prompt, enter: select username,email from user where idms_id = 1 and id in (select distinct user_id from yubikey_app_user where deleted_at is null) and deleted_at is null Connect to the database using dbconnect.Access the root directory using sudo su.You can identify user accounts that currently have U2F enabled using a query against the database. If you are unable to upgrade to v3.1.0 or later, we suggest identifying impacted users and limiting the issue's impact on them as much as possible. Selecting Blockdisables their two-factor authentication. Users must select Allow from the dialog to continue each time they access Kion. If you own this site, you should change it to use the Web Authentication API. This site won't be able to use the U2F API after February 2022. User ExperienceĪll Kion users using U2F for multi-factor authentication with the Kion internal directory will start receiving the following message in Chrome: If you do not upgrade to the latest release of Kion, you should not plan to upgrade to Chrome 98. This issue was fixed in the 3.1.0 release of Kion. This does not impact you if you use TOTP authentication (Google Authenticator, etc.) for the Kion internal directory.

This does not impact you if you use U2F devices through a SAML 2.0 provider. Starting with Chrome 98 (available for beta in January 2022 and generally available in February 2022), the U2F API will be disabled by default. It enables using FIDO U2F authentication devices such as a Yubikey.Ĭhrome 95+ now displays a deprecation warning if you are using a web application, such as Kion, with U2F authentication via the U2F API.

U2F (FIDO Universal Second Factor) is an optional multi-factor authentication method for the Kion internal directory.

If you use U2F authentication, we strongly suggest upgrading to the latest release of Kion. We now use the Web Authentication API instead of the U2F API. U2F Multi-Factor Authentication in Chrome

Aws u2f