Ability for users to choose TOTP or E-mail for MFA?

[pd-sgdev1]

trafficstars

Hi,

I would like to give users ability to choose TOTP (e.g. Authenticator app) or E-mail as the second authentication factor.

Thank you

[JasSuri]

This sample demonstrates how to present more than 1 factor on the same page. https://github.com/azure-ad-b2c/samples/tree/master/policies/pwd-reset-via-email-or-phone

You can use this concept to have email, mfa & totp on the same page.

Here is live sample for Email/MFA/TOTP

And XML: TrustFrameworkExtensions_pwd-reset-email-or-phone.xml.txt

[pd-sgdev1]

Thanks for that.

As for the XML attached in the previous message, there are missing technical profiles and possibly claim type definitions. Are these defined in a separate TrustFrameworkExtensions_xxx policy file?

[nexaddo]

bump

[JasSuri]

The sample should connect directly to the AAD B2C starter pack.