<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Stian,</div><div><br></div><div>I updated my prototype to cover the topics listed in the document: <a href="https://github.com/keycloak/keycloak/wiki/User-Account-Management">https://github.com/keycloak/keycloak/wiki/User-Account-Management</a>.</div><div><br></div><div>Please check it out in <a href="https://gatein.mybalsamiq.com/projects/keycloak/grid">https://gatein.mybalsamiq.com/projects/keycloak/grid</a>, screens from <i>Linda account </i>to <i>Linda Authorised Access 2</i>.</div><div><br></div><div>Gabriel</div><div><br></div><br><div><div>On Aug 19, 2013, at 9:54 AM, Bill Burke wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><br><br>On 8/19/2013 8:52 AM, Gabriel Cardoso wrote:<br><blockquote type="cite">Very nice Stian!<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><blockquote type="cite">* When a user first registers there will be a checkbox to enable TOTP if the users wants to - if TOTP is required by the realm this checkbox will always be enabled (and the user won't be able to change it)<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">* After clicking register the user is forwarded to the configure TOTP page (in user account management)<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">* If a user doesn't complete the above form, or a user registered prior to totp being set as required for the realm, when a user tries to login the user is forwarded to the configure TOTP page<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">* The TOTP page should list out the available TOTP providers (ATM only Google authenticator is supported) and show instructions for the user to configure it. A user should be required to enter a valid authenticator code to enable TOTP<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Later a user can view the TOTP settings for his account through the user account management. If totp is not required by the realm the user can also remove the totp. A user can always change the totp, again this required providing a valid authenticator code.<br></blockquote></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">This flow sounds good to me.<br></blockquote><br>Yes. +1 on the flow.<br><br>-- <br>Bill Burke<br>JBoss, a division of Red Hat<br><a href="http://bill.burkecentral.com">http://bill.burkecentral.com</a><br>_______________________________________________<br>keycloak-dev mailing list<br>keycloak-dev@lists.jboss.org<br>https://lists.jboss.org/mailman/listinfo/keycloak-dev<br></div></blockquote></div><br></body></html>