Windows 10: Unable To Sign Into Outlook.com Using FIDO2

/u/DefinitelyYou · Nov 3, 2019

There appears to be an intermittent issue signing into Outlook.com using FIDO2 at the moment.

I had just removed a Microsoft account from the machine and when I attempted to sign into the Microsoft account via the web browser using FIDO2, it just kept displaying an error message.

Initially I though the problem was due to some weird issue with removing the Microsoft account from the device, so I signed into the account using a username/password and removed FIDO2 logging in for both the security key (Yubikey) and Windows Hello (TPM Module); then re-added them again. Initially that seemed to work, however the problem returned again later—so I think there's currently an intermittent issue that Microsoft needs to resolve their end.

Error when signing in with FIDO2 security key (Yubikey):

Error message 1 (YubiKey)

Something went wrong We can't get that information right now. Please try again later. X-ClientId: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX request-id XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX X-Auth-Error System.ArgumentNullException X-OWA-Version 15.20.2408.24 X-FEServer LNXP265CA0093 X-BEServer LO3P123MB2681 Date:03/11/2019

Error when signing in with FIDO2 Windows Hello (TPM module):

Error Message 2 (TPM)

Something went wrong We can't get that information right now. Please try again later. cId: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX app: mail st: 500 reqid: wsver: 15.20.2408.24 te: 1 refurl: https://outlook.live.com:444/mail/?lex=System.ArgumentNullException efe: LO2P265CA0119 ebe: LNXP265MB0202 et: ServerError esrc: LiveIdAuth err: System.ArgumentNullException ts: 03/11/2019
submitted by /u/DefinitelyYou
[link] [comments]

:)

Brink · Nov 3, 2019

Passwordless FIDO2 verification on Android for Google Accounts

Passwords, combined with Google's automated protections, help secure billions of users around the world. But, new security technologies are surpassing passwords in terms of both strength and convenience. With this in mind, we are happy to announce that you can verify your identity by using your fingerprint or screen lock instead of a password when visiting certain Google services. The feature is available today on Pixel devices and coming to all Android 7+ devices over the next few days.

Simpler authentication experience when viewing your saved password for a website on passwords.google.com

These enhancements are built using the FIDO2 standards, W3C WebAuthn and FIDO CTAP, and are designed to provide simpler and more secure authentication experiences. They are a result of years of collaboration between Google and many other organizations in the FIDO Alliance and the W3C.

An important benefit of using FIDO2 versus interacting with the native fingerprint APIs on Android is that these biometric capabilities are now, for the first time, available on the web, allowing the same credentials be used by both native apps and web services. This means that a user only has to register their fingerprint with a service once and then the fingerprint will work for both the native application and the web service.

Note that your fingerprint is never sent to Google’s servers - it is securely stored on your device, and only a cryptographic proof that you’ve correctly scanned it is sent to Google’s servers. This is a fundamental part of the FIDO2 design.

Here is how it works

Google is using the FIDO2 capability on Android to register a platform-bound FIDO credential. We remember the credential for that specific Android device. Now, when the user visits a compatible service, such as passwords.google.com, we issue a WebAuthn “Get” call, passing in the credentialId that we got when creating the credential. The result is a valid FIDO2 signature.

High-level architecture of using fingerprint or screen lock on Android devices to verify a user’s identity without a password

Please follow the instructions below if you’d like to try it out.

Prerequisites

Phone is running Android 7.0 (Nougat) or later

Your personal Google Account is added to your Android device

Valid screen lock is set up on your Android device

To try it

Open the Chrome app on your Android device

Navigate to https://passwords.google.com

Choose a site to view or manage a saved password

Follow the instructions to confirm that it’s you trying signing in

You can find more detailed instructions here.

For additional security

Remember, Google's automated defenses securely block the overwhelming majority of sign-in attempts even if an attacker has your username or password. Further, you can protect your accounts with two-step verification (2SV), including Titan Security Keys and Android phone’s built-in security key.

Both security keys and local user verification based on biometrics use the FIDO2 standards. However, these two protections address different use cases. Security keys are used for bootstrapping a new device as a second factor as part of 2SV in order to make sure it’s the right owner of the account accessing it. Local user verification based on biometrics comes after bootstrapping a device and can be used for re-authentication during step-up flows to verify the identity of the already signed-in user.

What’s next

This new capability marks another step on our journey to making authentication safer and easier for everyone to use. As we continue to embrace the FIDO2 standard, you will start seeing more places where local alternatives to passwords are accepted as an authentication mechanism for Google and Google Cloud services. Check out to get an early glimpse of the use cases that we are working to enable next.

fsFxbC543n8
Click to expand...

Source: https://security.googleblog.com/2019...r-with_12.html

Munki · Nov 3, 2019

GUIDE:How to transfer contacts from Microsoft Outlook to Gmail

I'm sitting here in the office, its the end of the year in the school system, and several employees transferring to alternative counties. With this it brings loads of transferring contacts to take with them from their company phone. Well, this one in particular sparked a guide idea. So here it is, How to transfer Outlook contacts to your Gmail account.

Step 1: Sign in to your outlook account.
step 2 In the top left hand corner click File > Import/Export > Export to file > Browse to desired place to save your file > export. Be sure you export the file as .csv (comma separated values)
Step 3 Log into your Gmail account
Step 4 Select 'Contacts' In the subsection you will see a 'Import' button on the right-hand side. Click it.
Step 5 Browse to the location where you saved it > Open it > Click Import.

I would have provided pictures, but I use neither Outlook or Gmail. Hope someone somewhere gets some use from this. *Toast :toast:

=Munki=

Brink · Nov 3, 2019

Passwordless FIDO2 verification on Android for Google Accounts

Passwords, combined with Google's automated protections, help secure billions of users around the world. But, new security technologies are surpassing passwords in terms of both strength and convenience. With this in mind, we are happy to announce that you can verify your identity by using your fingerprint or screen lock instead of a password when visiting certain Google services. The feature is available today on Pixel devices and coming to all Android 7+ devices over the next few days.

Simpler authentication experience when viewing your saved password for a website on passwords.google.com

These enhancements are built using the FIDO2 standards, W3C WebAuthn and FIDO CTAP, and are designed to provide simpler and more secure authentication experiences. They are a result of years of collaboration between Google and many other organizations in the FIDO Alliance and the W3C.

An important benefit of using FIDO2 versus interacting with the native fingerprint APIs on Android is that these biometric capabilities are now, for the first time, available on the web, allowing the same credentials be used by both native apps and web services. This means that a user only has to register their fingerprint with a service once and then the fingerprint will work for both the native application and the web service.

Note that your fingerprint is never sent to Google’s servers - it is securely stored on your device, and only a cryptographic proof that you’ve correctly scanned it is sent to Google’s servers. This is a fundamental part of the FIDO2 design.

Here is how it works

Google is using the FIDO2 capability on Android to register a platform-bound FIDO credential. We remember the credential for that specific Android device. Now, when the user visits a compatible service, such as passwords.google.com, we issue a WebAuthn “Get” call, passing in the credentialId that we got when creating the credential. The result is a valid FIDO2 signature.

High-level architecture of using fingerprint or screen lock on Android devices to verify a user’s identity without a password

Please follow the instructions below if you’d like to try it out.

Prerequisites

Phone is running Android 7.0 (Nougat) or later

Your personal Google Account is added to your Android device

Valid screen lock is set up on your Android device

To try it

Open the Chrome app on your Android device

Navigate to https://passwords.google.com

Choose a site to view or manage a saved password

Follow the instructions to confirm that it’s you trying signing in

You can find more detailed instructions here.

For additional security

Remember, Google's automated defenses securely block the overwhelming majority of sign-in attempts even if an attacker has your username or password. Further, you can protect your accounts with two-step verification (2SV), including Titan Security Keys and Android phone’s built-in security key.

Both security keys and local user verification based on biometrics use the FIDO2 standards. However, these two protections address different use cases. Security keys are used for bootstrapping a new device as a second factor as part of 2SV in order to make sure it’s the right owner of the account accessing it. Local user verification based on biometrics comes after bootstrapping a device and can be used for re-authentication during step-up flows to verify the identity of the already signed-in user.

What’s next

This new capability marks another step on our journey to making authentication safer and easier for everyone to use. As we continue to embrace the FIDO2 standard, you will start seeing more places where local alternatives to passwords are accepted as an authentication mechanism for Google and Google Cloud services. Check out to get an early glimpse of the use cases that we are working to enable next.

fsFxbC543n8
Click to expand...

Source: https://security.googleblog.com/2019...r-with_12.html

Windows 10: Unable To Sign Into Outlook.com Using FIDO2

Unable To Sign Into Outlook.com Using FIDO2

Unable To Sign Into Outlook.com Using FIDO2

Unable To Sign Into Outlook.com Using FIDO2

Unable To Sign Into Outlook.com Using FIDO2 - Similar Threads - Unable Sign Outlook

Unable to use Sign-In Icon

Unable to use Sign-In Icon

unable to use sign in options

unable to use sign in options

unable to use sign in options

unable to automatically stay signed in to outlook email.

unable to automatically stay signed in to outlook email.

unable to automatically stay signed in to outlook email.

Unable to sign into Outlook Account on my computer