2FA On Login
-
Hi,
Is it possible to have Two Factor Authentication in conjuction with Google and OpenId Identity Providers when using the hosted login pages? I have set FusionAuth up to use the Authenticator method as shown in the documentation and Users who Authenticate with Username and Password are being prompted for their validation code. Users who log in with Google or OpenId never see the prompt and are logged straight into the application. Is there a way to have the user verify with the Identity Provider and then be prompted for the second auth factor?
Many thanks,
Chris. -
@lsmith said in 2FA On Login:
Is it possible to have Two Factor Authentication in conjuction with Google and OpenId Identity Providers when using the hosted login pages?
Nope. This is because when you are using an identity provider, the identity provider is assumed to have done everything needed to authenticate the user. FusionAuth is delegating everything to that.
You could, if you need to, immediately do a "step up" auth in your application, but FusionAuth won't take care of this for you.
If you'd like to submit a feature request for this further explaining your use case, feel free to do so (you can reference this forum post): https://github.com/fusionauth/fusionauth-issues/issues
