Apart from digital methods like Okta Verify, SMS or Google Authenticator as MFA methods, CityU's MFA system supports Yubikey as a physical method to log in the Single Sign On system.
This link shows the available models that you can buy from the market, you have to choose the ones that support FIDO2/WebAuthn. The price varies from HKD $200 to $800, depending on the features that you want. "5 Series" is the basic and "Bio Series" supports fingerprint authentication.
After you get a Yubikey, you can follow these steps to set it up.
Log on to https://auth.cityu.edu.hk, pull down the menu on the top right corner, and click Settings.
Click the "Edit Profile" button on the top right corner.
You will be required to authenticate your identity by providing a password and MFA.
Browse down and click Set up next to "Security Key or Biometric Authenticator".
Click "Setup".
Click "Enroll".
You will see this screen, click "OK".
Click "OK" again.
Step 10 and 11 shows the setup for "5 Series". These 2 steps will be different for other series.
Enter a 4-digit PIN to protect the Yubikey, you will need to use this PIN when you use this Yubikey as an MFA method.
Touch the metallic park on the Yubikey. You will be asked to touch the key twice.
And then the setup is completed.
Next time when you are prompted for MFA, pull down the arrow and choose "Security Key or Biometric Authenticator".
Enter the PIN you set before.
Touch the key.
And then MFA will pass and you will be brought to the system you're going.
If you want to try, please contact IT service desk to borrow it.
IT.ServiceDesk@cityu.edu.hk
