Multi Factor Authentication Blueprint

MFA with OTP, WebAuthn, and recovery codes

   
Feature multi-factor-authentication
Category Auth
Version 1.0.0
Tags mfa, credentials
YAML Source View on GitHub
JSON API multi-factor-authentication.json

Fields

Name Type Required Label Description
credential_type select Yes Credential Type Validations: required
otp_code text No OTP Code Validations: pattern

Rules

  • core: MFA credential management

Outcomes

Mfa_verified (Priority: 5)

Given:

  • otp_code exists null

Then:

  • emit_event event: mfa.verified

Result: MFA verified

Errors

Code Status Message Retry
INVALID_OTP 401 Invalid OTP code No

Events

Event Description Payload
mfa.verified MFA verification successful user_id
Extensions (framework-specific hints) ```yaml source: repo: https://github.com/keycloak/keycloak project: Keycloak tech_stack: Java ```