search

stormpath / idsite-src

Project source for Stormpath's default production ID Site
Apache License 2.0
15 stars 54 forks source link

Add MFA support #276

Closed typerandom closed 7 years ago

typerandom commented 7 years ago

Adds MFA support for require_mfa workflow, usage documentation will be added to this section:

https://docs.stormpath.com/rest/product-guide/latest/idsite.html#idsite-auth-jwt

The challenge workflow (requiring a specific challenge) will be added in the future.

javierbq commented 7 years ago

Any ETA of when this PR is getting merged? We have a client that is desperately asking for this feature.

robertjd commented 7 years ago

Hi @javierbq , we're completing our final reviews this week and should merge it soon. If you would like to beta test it, you can point your ID Site Configuration at the "mfa-demo" branch in our default Github repo. Please let me know if you have any issues while testing, thanks!

The configuration should look like this:

image

When you create the redirect URL to ID Site, you need to add this claim to the JWT request:

require_mfa: ['sms'] // declare types you want to allow the user to enroll with