Add option to authorize and possibly configure methods other than TOTP/EMAIL via the new client mfa flows feature
Open
timebox
- Dominant language
- Rust
- Stars
- 2.8k
- Forks
- 115
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 51
Description
Right now we allow of in flight configuration of only totp and email methods and only those methods are used for user authorization (required for in flight configuration). We may consider supporting more methods.
Allow to use additional methods for authorizing MFA factor configuration:
- OIDC
- Mobile
- FIDO
Allow to configure additional methods using the desktop client:
- Mobile (process still undefined)
- FIDO
Contributor guide
Assessment
This issue has not been assessed yet.