Best posts made by theo

For certain workflows, we may want the user to re-authenticate themselves. What would be the best way to force the user to perform 2FA / MFA?

For a web-based app, is it possible for a user to sign-in under different accounts and freely switch between them?

We have an application where users can create workspaces, but the account tied to each workspace is unique to that workspace. We'd like for the user to be able to sign-in to as many workspaces as they'd like but also switch between the accounts easily.

If this is possible, how would one do it? We do this with Cognito, but it's a gigantic hack with lots of local storage manipulations.