企业环境中无密码 FIDO2 的挑战：一项可用性研究
Challenges with Passwordless FIDO2 in an Enterprise Setting: A Usability Study
AI总结：
本文通过118名专业人员的可用性研究，识别了FIDO2在企业身份生命周期（如远程员工和遗留系统）集成中的挑战，发现账户恢复等严重差距，并为FIDO2社区确定了优先开发领域。
摘要：
Fast Identity Online 2 (FIDO2) 是一种现代身份验证协议，正作为默认的强身份验证机制日益普及。它被认为是克服现有身份验证解决方案局限性（例如，它具有抗钓鱼能力）的领先候选者。然而，弃用基于密码的身份验证等弱方法并非易事，需要一种综合的方法。尽管 FIDO2 的安全性、隐私和最终用户可用性已在学术和行业文献中得到探讨，但其在生产环境集成方面的困难（如解决方案完整性或边缘情况支持）却鲜受关注。特别是，企业身份管理等复杂环境对任何身份验证系统都构成了独特的挑战。在本文中，我们通过开展一项可用性研究，识别了具有挑战性的企业身份生命周期用例（例如，远程员工和遗留系统），在该研究中，118 名专业人员分享了他们基于实际现场经验的 FIDO2 集成挑战看法。我们对用户研究结果的分析揭示了严重的差距，例如账户恢复（超过 60% 的受访者选择了此项），并为 FIDO2 社区确定了优先开发领域。
英文摘要：
Fast Identity Online 2 (FIDO2), a modern authentication protocol, is gaining popularity as a default strong authentication mechanism. It has been recognized as a leading candidate to overcome limitations (e.g., it is phishing resistant) of existing authentication solutions. However, the task of deprecating weak methods such as password-based authentication is not trivial and requires a comprehensive approach. While security, privacy, and end-user usability of FIDO2 have been addressed in both academic and industry literature, the difficulties associated with its integration with production environments, such as solution completeness or edge-case support, have received little attention. In particular, complex environments such as enterprise identity management pose unique challenges for any authentication system. In this paper, we identify challenging enterprise identity lifecycle use cases (e.g., remote workforce and legacy systems) by conducting a usability study, in which 118 professionals shared their perception of challenges to FIDO2 integration from their hands-on field experience. Our analysis of the user study results revealed serious gaps such as account recovery (selected by over 60% of our respondents), and identify priority development areas for the FIDO2 community.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
