search

netzbegruenung / keycloak-mfa-plugins

Keycloak Authentication Provider implementation to get a 2nd-factor authentication with a OTP/code/token send via SMS
Apache License 2.0
42 stars 9 forks source link

Enable aborting SMS 2FA setup #50

Open melegiul opened 1 year ago

melegiul commented 1 year ago

When a user enters a phone number and clicks on next, the phone number must be confirmed by entering the SMS code. Until the right SMS code is submitted, a new required action "Set phone number" is added to the user, even if other 2FA methods are configured.

This makes it hard for the user to abort the setup. The only way currently is to successfully setup SMS 2FA.

alexanderhofstaetter commented 1 week ago

This would be great to solve. This is also a problem because the SMS form cannot be aborted with a "back to login button"