![Yubikey ssh](https://cdn1.cdnme.se/5447227/9-3/24_64e61dfd9606ee7f8b257167.png)
![yubikey ssh yubikey ssh](https://4.bp.blogspot.com/-b418fdcEJpM/WNK0JhJZgZI/AAAAAAAAOZ0/En18ebsA5lk1cjPrztlAKkwzbuxrI64WgCEw/s1600/YubiKey-4-Nano-In-Use-5.png)
If they don't have an active session they will need to login with primary authentication such as Google or OneLogin. This will direct the user to the Pritunl Zero user authentication web page. The SSH authentication starts with requesting a SSH certificate from the Pritunl Zero server, this is done by running the command pritunl-ssh. Refer to the next section for configuring Pritunl Zero.
![yubikey ssh yubikey ssh](https://i.ytimg.com/vi/bQyL0uzrL3k/maxresdefault.jpg)
Policies can be used to control what methods are required for a faster authentication process. This example authentication process represents the process a user will follow to authenticate using all of the available authentication factors.
![Yubikey ssh](https://cdn1.cdnme.se/5447227/9-3/24_64e61dfd9606ee7f8b257167.png)