iam
iam copied to clipboard
Support for Multi-factor Authentication
Goals
- Allow users to register a second factor for their account
- Supported second-factor type:
- TOTP app, e.g., Google Authenticator
- Yubikey? (later)
- Supported second-factor type:
- Allow applications to request that users authenticate using MFA
- Signal in IDTokens returned by IAM whether MFA was used during authentication
Tasks
- [ ] Define changes to the database schema and persistence layer to store 2nd factor information linked to accounts https://github.com/indigo-iam/iam/issues/419
- [ ] #420
- [ ] #421
- [ ] #422
- [ ] #423
The proposal document can be found here. This contains design and implementation as well as comments from other developers about how best to code and configure the project.