Jamf Connect vs. Yubico YubiKeys

Jamf Connect is a nice and customizable tool for password change or password sync and account creation during an enrollment process. The configuration is not very easy to understand at the start. Especially if an iDP comes into play and you don't have an idea with Azure or similar services. With Jamf Connect ad bind is dead on macs.

For us high value targets that have sensitive access, it just makes sense to use Yubico YubiKeys. We feel comfortable with the solution and hardware. It’s super easy for everyone to use. They say the feel important having to use it like a spy sometimes. For our everyday user we have not deployed currently and are still trying to decide if it’s right for them due to the fact that we have many pieces of hardware lost with just their access entry NFC devices.

Incentivized

• password sync works very well
• regular updates to Jamf Connect with improvements
• small and simple tool
• Account creation is now on next level after we don't need AD Bind

• Provides additional factors for authenticating against critical systems.
• Significantly reduces the chance of a successful phishing attempt.
• Can function as your primary credential for passwordless authentication.
• Extremely durable - I've had the same Yubikeys in use for years.
• Cross-platform - can be used on all mainstream operating systems and mobile devices.

Incentivized

• the Jamf configuration app for the config profiles looks not really Jamf-like
• Why are under "Jamf Connect Deployment and Update Settings" in Jamf Pro all possible configuration profiles listed? We have some and I don't think there had to list every!?
• how the Jamf Connect updates work under "Jamf Connect Deployment and Update Settings" is very unclear. i.e. for troubleshooting

• I'd feel better if the key were a little more solidly built - it feels a little flimsy
• The design could also use a cap for the connection - I'm nervous having it on my key chain and users have mentioned the same concerns.
• There seems to be some cracks forming in the support for security keys which is starting to mitigate the usefulness across an entire ecosystem.

Incentivized

I give slightly better than average rating because of the complexity in using a Yubikey. It is not as easy as native push notifications for 2FA products, however, it provides much better strength. Rating this higher or lower would be a disservice to people reading this review. If you are in the market for a hardware 2FA tool, Yubikey will be a great asset in your toolbox.

Incentivized

simple to use and keep on hand to deploy/use

Incentivized

its instantaneous!

Incentivized

They offer ways to store passwords or MFA support, but most need a root password. In addition, LastPass and 1Password do not have much support for MFA. This results in a lack of MFA support. For Okta, although it offers MFA and SSO, the OTP can be very annoying to have as I do not always know where my phone is placed.

Incentivized

deployment is simple and the complex hardware is made simple.

Incentivized

• we need more time to understand how Jamf Connect and the configuration "really" works

• We have had users tied in their YubiKey with Windows Hello for for Business providing a password less login experience. The users are happy for the ease of logging in and being part of the security team we're excited for the multi factor authentication.

Incentivized