fido, federation & facebook social login · 22 all rights reserved | fido alliance | copyright...
TRANSCRIPT
![Page 1: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/1.jpg)
All Rights Reserved | FIDO Alliance | Copyright 20171
FIDO, Federation& Facebook Social login
![Page 2: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/2.jpg)
All Rights Reserved | FIDO Alliance | Copyright 20172
Derek Hanson
Director of Solution Architecture
and Standards
![Page 3: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/3.jpg)
All Rights Reserved | FIDO Alliance | Copyright 20173
AGENDA
● FIDO U2F: A strong second-factor● U2F and Federation● Facebook Integration & Social Login
![Page 4: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/4.jpg)
● Simple, single gesture authentication
● Scalable, one device works across an unlimited number of
sites
● Secure, protects against phishing and man-in-the-middle
attacks
● Privacy preserving, no secrets shared between sites
● Open Standard, platform/browser support, no 3rd-party
protocol
All Rights Reserved | FIDO Alliance | Copyright 20174
Why FIDO?
![Page 5: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/5.jpg)
All Rights Reserved | FIDO Alliance | Copyright 20175
Where Does FIDO Fit?
Identity Proofing
User Management
Authentication
Federation
Passwords Risk-BasedStrong
MODERN
AUTHENTICATION
Single
Sign-On
![Page 6: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/6.jpg)
All Rights Reserved | FIDO Alliance | Copyright 20176
FIDO U2F Challenge/Response Flow
![Page 7: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/7.jpg)
All Rights Reserved | FIDO Alliance | Copyright 20177
Notable RPs using FIDO U2F
![Page 8: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/8.jpg)
All Rights Reserved | FIDO Alliance | Copyright 20178
FIDO U2F and Federation
● FIDO U2F Authentication protects
login to federation account, which
holds the “keys to the kingdom”
● FIDO U2F security benefits extend
to federated logins
● Strengthens federation protocols:
SAML, OAuth 2.0
![Page 9: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/9.jpg)
All Rights Reserved | FIDO Alliance | Copyright 20179
U2F, Federation, and Facebook
● Facebook added support for FIDO
U2F in January 2017
● Social logins (Login with ‘X’)
extends FIDO U2F security benefits
to federated account access
![Page 10: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/10.jpg)
Benefits:
● Phishing protection
● Fast, secure logins (and social logins)
● Interoperable (1 token, many services)
All Rights Reserved | FIDO Alliance | Copyright 201710
U2F, Federation, and Facebook
![Page 11: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/11.jpg)
● Facebook social logins use OAuth
2.0 and OpenID Connect-like
extensions (Facebook Connect)
● SAML used for enterprise
federation
All Rights Reserved | FIDO Alliance | Copyright 201711
Facebook Federation
![Page 12: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/12.jpg)
Scenario: Currently Logged into Facebook with
username/password & U2F Token
All Rights Reserved | FIDO Alliance | Copyright 201712
Relying Party:
IdP:
U2F, Federation and Facebook
![Page 13: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/13.jpg)
All Rights Reserved | FIDO Alliance | Copyright 201713
![Page 14: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/14.jpg)
All Rights Reserved | FIDO Alliance | Copyright 201714
![Page 15: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/15.jpg)
All Rights Reserved | FIDO Alliance | Copyright 201715
![Page 16: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/16.jpg)
All Rights Reserved | FIDO Alliance | Copyright 201716
![Page 17: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/17.jpg)
● Enable Social Authentication for Account Recovery
● Enable Users to Opt-Out of Managing Passwords
● Enable Secure and Simple to Use Social Login
● Become a Secure Identity Provider for Your
Employees, Customers, Vendors, Partners, etc.
How does FIDO & Federation benefit me?
All Rights Reserved | FIDO Alliance | Copyright 201717
![Page 18: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/18.jpg)
Read the U2F Specifications FIDO specs & github.com/dainnilsson/u2f-tutorial
Build Your Own Server https://developers.yubico.com/U2F/Libraries/List_of_libraries.html
Use Standalone Server dev.yubi.co/u2fval
Use the Online Service u2fval.appspot.com
Yubico U2F Demo Server demo.yubico.com/u2f
Google U2F Demo Server u2fdemo.appspot.com
Start Building a BetterAuthentication Stack Now!
All Rights Reserved | FIDO Alliance | Copyright 201718
Learn
![Page 20: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/20.jpg)
All Rights Reserved | FIDO Alliance | Copyright 201720
Extra slides
![Page 21: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/21.jpg)
All Rights Reserved | FIDO Alliance | Copyright 201721
FIDO + Federation
Relying PartyIdP
![Page 22: FIDO, Federation & Facebook Social login · 22 All Rights Reserved | FIDO Alliance | Copyright 2017 User verification Authenticator FIDO Authentication. Author: Andrea Madore Created](https://reader034.vdocuments.net/reader034/viewer/2022051912/6002ba2e78dc841467504259/html5/thumbnails/22.jpg)
All Rights Reserved | FIDO Alliance | Copyright 201722
AuthenticatorUser verification FIDO Authentication
Require user gesture before
private key can be used
Challenge
(Signed) Response
Private key
dedicated to one appPublic key
How does FIDO Work?