Hi David,

Update your app and it should show the email address :). So now we can see which account to choose.

Regards,

Peter

Hi David,

I see what you mean and unfortunately, there seems no option to change the name. I’ll pass it on to my IDmelon contact as feedback.

Regards,

Peter

Great article – thank you.

I went ahead and added multiple Keys for various client AAD User Accounts that I use.

Unfortunately, when trying to authenticate the IDMelon App ONLY presents the User’s Display Name (from AAD, in my case always ‘David Masters’) and that it’s a Microsoft Key. The UPN is not displayed, making selection of the desired Key impossible. Do you know if it’s possible to edit the Name?

Cheers
David

Thank you very much for your opinion Gunnar. Fortunately, it’s not my opinion.
I’ve no relation with Idmelon, in whatever way. I only tested their solution, like I tested several other FIDO solutions. So I’m going to ‘defense’ this solution.
But IDmelon is certified by the FIDO Alliance, so I can’t imagine it’s an unsafe solution. Even if the credentials private key is stored on a smartphones (it’s stored inside the smartphone’s secure element).
And when you leave the FIDO key always connected to a PC, which is mostly connected to the internet, how offline is that ?

Regards,

Peter

My setup is also AADJ device and AAD user. I’m sure if you can’t figure out the problem yourself, IDmeldon support will help you.

Regards,

Peter

Hi Peter,

Yes, it shows in the app as a paired device. When I pair it with the tool, set a name and click done, the tool closes. When I re-open the tool “No smartphone is paired.”

My test setup is an AADJ device logged in with an AAD user.

Thanks for the answer. I’ll try and contact IDmelon support.

The security of FIDO2 is that it’s a device that has a secure key storage, is OFFLINE, and can register on basically infinite sites with no “cloud” communication required.

This retarded app is adding key storage is an online device. It requires a fracking account(!) and is saving a list of all sites you registered on… like what?

And then you need a friggin huge dongle anyway to authenticate with it… Have you seeeeeeen how tiny the security keys are, get a yubikey, or a solo, stick it in and keep it there, forever.

This is harmful to the FIDO2 name.

Hi Nick,

I haven’t seen such an issue on my devices.
Does the IDmelon app on your mobile device show a paired device?
And what happens when you pair the devices again?

Firstly, thanks for the amazing blog post!

After pairing my phone with the pairing tool it says it paired succesfully, but when I re-open the tool it says “No smartphone is paired.”

Also when I try to add the security key under security info > Add method > USB it keeps searching for a real USB instead of my phone.