Question for anyone that does FIDO2/U2F/Windows He...
# citrix-vad
j
Question for anyone that does FIDO2/U2F/Windows Hello over HDX. I run every type under the sun to validate for our user base. In addition my primary machine is a Remote PC/Physical desktop. It seems like when ever I'm in office, my subsequent HDX sessions will only allow the FIDO2/Hello method that was last used at the desktop. ie. Launch Okta app (Okta is not important as much as the U2F/FiDO2 call from the browser, then the divergence between wfica32 or the physical machine if I'm in office), I have a cookie that tells Okta to use Security Key/Biometrics as the MFA method, if I'm in office, I use a Yubikey (no Windows Hello device in the office). The next day I WFH, same process as above, wfica32 prompts for Yubikey and Yubikey only. I reboot my Remote Access PC, and subsequent MFA challenges allow me to select Windows Hello