iam icon indicating copy to clipboard operation
iam copied to clipboard

Support for Multi-factor Authentication

Open andreaceccanti opened this issue 3 years ago • 1 comments

Goals

  • Allow users to register a second factor for their account
    • Supported second-factor type:
      • TOTP app, e.g., Google Authenticator
      • Yubikey? (later)
  • Allow applications to request that users authenticate using MFA
  • Signal in IDTokens returned by IAM whether MFA was used during authentication

Tasks

  • [ ] Define changes to the database schema and persistence layer to store 2nd factor information linked to accounts https://github.com/indigo-iam/iam/issues/419
  • [ ] #420
  • [ ] #421
  • [ ] #422
  • [ ] #423

andreaceccanti avatar Sep 20 '21 11:09 andreaceccanti

The proposal document can be found here. This contains design and implementation as well as comments from other developers about how best to code and configure the project.

sam-glendenning avatar Oct 25 '21 12:10 sam-glendenning