SAP Authenticator vs Yubico Authenticator

SAP Authenticator is a free mobile app that generates time-based passcodes for systems requiring one-time password authentication. Each code works for one login attempt, and the app creates a new one every 30 seconds. A passcode can act as a second factor or as an alternative password. The app supports multiple accounts, which can be configured by scanning a QR code or entering a secret key. Online account setup is also available only with SAP Authenticator. For accounts set up online, administrators add applications; users cannot maintain those applications themselves. Users can save applications in the app and access them later through mobile single sign-on without another authentication step. SAP documentation describes OTP authentication and mobile SSO use with SAP Single Sign-On and SAP Fiori Client. The app runs on iOS and Android and can be protected with a password. SAP recommends protecting the app with a logon password and using two-factor authentication when the scenario allows it.

Yubico Authenticator generates two-step verification codes for online accounts on mobile and desktop devices. It supports TOTP and HOTP, and users can add credentials by scanning a service’s QR code. Credentials are stored in a YubiKey secure element; Yubico says they cannot be extracted. Since the credentials remain on the portable YubiKey, the same codes are available through the mobile and desktop apps. The mobile app supports tap-and-go authentication on NFC-enabled devices, and credentials can be added with a YubiKey touch or NFC tap. Yubico says users can unlock a YubiKey with Face ID or Touch ID. The app can display OATH codes and manage a YubiKey’s FIDO PIN or perform a factory reset. It is free and open-source software, listed at free, for Windows, macOS, Linux, iOS/iPadOS, and Android. Generating and displaying OATH credentials with the desktop app requires a YubiKey.