Windows Hello / Security Key Integration for Password less usage?

Windows Hello / Security Key Integration for Password less usage?

0 vote

avatar

I read the blog article about Cyber Ark Password less integration and sounds great except I don't have there software to use this feature. I use Windows Hello / Security key logins all the time now on Windows 10 with Azure AD join and its excellent so I'd be over the moon if RDM could also get Windows Hello / Security Key integration just like browsers now do as well as more and more apps?

Ive got no Reference material yet but I'm going to investigate it today as I'm sure Microsoft has code for implementing this.

Thanks,

JK
Devolutions Force Member (and Long time Devolutions Fan)

All Comments (7)

avatar

Hello,
Let me know if you find any clue on how we could do something like that.

Regards

David Hervieux

avatar

Seeing as im unsure what language RDM is coded in all i can find are the Windows Hello implementation articles: -

https://github.com/Microsoft/Windows-universal-samples/tree/master/Samples/MicrosoftPassport

But Im unsure if that is for UWP apps only or can be implemented with non UWP apps it does mention C# which is a Windows OS native language, another article i found is for WebAuthn which works with Windows Hello and FIDO2 which Hello & Security keys are using themselves.

https://github.com/Microsoft/webauthn

Anyhow if you could hint to me what language RDM uses mainly I may be able to research further on more specifics, I'm sure getting RDM to work with Windows Hello / MS Passport for work would be a big news feature addition as other companies are already well on the FIDO2 / Windows Hello bandwagon already as i have several apps I use on Windows 10 now that authenticate with this, Browsers especially. I know RDP entries in RDM can passthrough Windows Hello already, I haven't tried a Browser Entry yet though but as its using a set Browser API im sure it would work. But what im thinking is RDM itself being able to use Windows Hello as Auth as an option to go with its existing 2FA / MFA features of which i already use via Yubikey but if FIDO2 could be implemented then not only can Yubikeys use that too it's also what Windows Hello uses itself. FIDO2 in Windows I do know is using that WebAuthn API so I'll see what else i can find in that area if that would help??

JK
Devolutions Force Member (and Long time Devolutions Fan)

avatar

Hello,
We are using C# with .NET 4.72 and it's not compatible with UWP. We plan to upgrade to .NET 5 when it become available. This .NET version will unify Winforms/.NET with UWP. Perhaps it will be easier to improve our integration. Regarding RDP, we use the ActiveX so if Microsoft support it, we should support it as well.

Regards

David Hervieux

avatar

Yes realised RDM isn't UWP but C# with .net gives me something to run with, ill do some more research and come back to you. the Integration I'm suggestion is to add FIDO2 / Win Hello alongside RDM's existing MFA / 2FA Intergrations i.e. YubiKey (which i use) but YubiKeys also work with FIDO2 like Windows Hello so rather than the key touch entering an OTP code it pops up asking for PIN and Touch alongside Windows Hello Pin popup. Thats what I'm suggesting as yes RDP entries etc have their own FIDO2 / Win Hello integration outside of RDM app.

Ill update soon, thanks for your time and keep up the magnificent work with my favourite app RDM

JK
Devolutions Force Member (and Long time Devolutions Fan)

avatar

Don't know if this would be of any use to you Dev's but its what's required to implement Fido2 / win hello via UWP module with C# apps apparently?

https://github.com/Microsoft/webauthn

Be so much better having actual prompt for Security Keys or Windows hello rather than OTP codes via Yubikey? Works great with my Azure AD Joined device then!

Thanks

JK
Devolutions Force Member (and Long time Devolutions Fan)

avatar

Thank you for the link. I will check if we can do something with it.

Regards

David Hervieux

avatar

Would your Devolutions Cloud Team be able to help with implementation at all as Fido2 support for security keys etc, so I realise it's using a diff framework Browser support, but it's got to be the same principle hasn't it?? Also, from what Ive read so far on the subject yes, the WebAuthn module is UWP itself but it's able to work with .net C# apps too, so the Cloud team have half the code already for their implementation so could the RDM team investigate if the code can be cannibalised for use with RDM?? In not really a developer in any shape or form so it's beyond my abilities to help further but I'd be over the moon to see WebAuthN in RDM alongside OTP support we have now??

Thanks

JK
Devolutions Force Member (and Long time Devolutions Fan)