PKI using the Yubikey

What is a one sentence summary of your feature request?

Use the MFA with Cert on the Yubikey

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

We want to login dirket with the Cert in the lokal Setting.

How do you currently solve the challenges you have by not having this feature?

With Authenticator

If you want to be logged in with your user certificate and PIN from your Yubikey insted of the ad-user password… thats what is already possible. Set “Edit first factor” in the Global user Settings or specific organisational unit / user setting for Windows application to “Smartcard”.

PS: If you want to let the users use the web app, you can set the FIDO2 for web application.