Yubico Forum

I set up my GMail account to authenticate using SSO. All worked fine for a few weeks. A few days ago GMail's behavior unexpectedly changed. Previously, I could log in to the domain control panel without authenticating via Yubikey. When I did so, GMail's built-in two-factor authentication would kick in and send an OTP to my cell phone, enabling me to log in. Now, the domain control panel requires authentication via Yubikey.

That behavior eliminates my ability to work around a lost Yubikey. But I don't regard the change as all that problematical. What is messed up is that, now, when I access certain domain control panel functions the Yubikey login web page appears even though I'm logged in. When I try to authenticate, the web page redirects a few times and eventually returns to the Yubikey login web page. So, I'm locked out of those functions.

I disabled GMail's two-factor (cell phone) authentication in an attempt to resolve the problem. No go.

I presume something has changed in Yubico's SAML server, GMail's authentication code, or both. Information? Ideas? Help?

Thanks!

Problem resolved by deleting cookies related to *.google.com. No idea why this was necessary. Suspect the Chrome 8 update may be involved.