<div dir="ltr">We have plans to add step up authentication. Basically the idea is that a user can authenticate with a set of week credentials (username/password), but when the application requires stronger authentication it would redirect back to Keycloak which would then ask for additional authentication (otp, sms, etc.). This is not something that's on our immediate road-map though.</div><div class="gmail_extra"><br><div class="gmail_quote">On 1 October 2015 at 10:06, Travis De Silva <span dir="ltr"><<a href="mailto:traviskds@gmail.com" target="_blank">traviskds@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">+1 for this feature. <div><br></div><div>This use case is getting quite popular these days. Apart from the banks that follow this procedure, you also get companies like Google that do this as an extra step to prevent someone who has stolen your username/password from using it to access your content.<br><div><br></div><div>A would like to suggest a few additional features around this requirement for it to be more valuable.</div><div><br></div><div>1. Option in KeyCloak to set if the SMS should be sent for all login attempts or only when logging in from a new device like who you get with Google</div></div><div><br></div><div>2. A set of actions that could trigger the SMS - For example let's say I have a banking web app and if the user logs in and does a funds transfer above a certain limit, I should be able to from my app trigger an SMS auth. Not sure if this is part of OAuth2 or OIDC but I have encountered quite a few applications following this flow to prevent identify theft.</div><div><br></div><div><br></div></div><div class="HOEnZb"><div class="h5"><br><div class="gmail_quote"><div dir="ltr">On Thu, 1 Oct 2015 at 17:52 Stian Thorgersen <<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Using SMS as a two factor auth mechanism is on the road-map, but not in the near future. The idea is basically that the server creates a unique code, sends it in SMS, and the user would then copy it back to the login screen. Issue with it is that we first need to allow users to select what two factor auth mechanism they want to use. They could have a hardware OTP token for example, but as they don't have it with them they could use the SMS code as a backup. We also have tons of other things ahead of it in the queue.<div><br></div><div>I'm a bit curious about your use-case. You basically want a user to login with mobile number + password, and also use a code sent over SMS as a two factor auth? Or do you have something different in mind?<br><div><br></div><div><br><div><div><br></div><div><br></div></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 1 October 2015 at 09:45, Anunay Sinha <span dir="ltr"><<a href="mailto:anunay.sinha@arvindinternet.com" target="_blank">anunay.sinha@arvindinternet.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace">Hi Stian,</div><div class="gmail_default" style="font-family:monospace,monospace">I have question about login through mobile devices in general,</div><div class="gmail_default" style="font-family:monospace,monospace">where I would like to login via mobile number, get an OTP on my number and use it to register/login into the system,</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">For the number I can follow your instructions but am looking to provide for OTP as well (I am exploring this). It will be nice to have it out of the box :)</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">Is such a option there in the Keycloak's roadmap ?</div><div class="gmail_default" style="font-family:monospace,monospace">If so what is the rough timeline?</div></div><div class="gmail_extra"><div><div><br><div class="gmail_quote">On Thu, Oct 1, 2015 at 1:06 PM, Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">You would need to create a custom authenticator for it. Take a look at <a href="http://keycloak.github.io/docs/userguide/html/auth_spi.html" target="_blank">http://keycloak.github.io/docs/userguide/html/auth_spi.html</a></div><div class="gmail_extra"><br><div class="gmail_quote"><span>On 30 September 2015 at 15:34, Revanth Ayalasomayajula <span dir="ltr"><<a href="mailto:revanth@arvindinternet.com" target="_blank">revanth@arvindinternet.com</a>></span> wrote:<br></span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span><div dir="ltr">Hi all,<div><br></div><div>I have an application that is secured by Keycloak. I am able to login using username/email and password. I also want to implement login via phone number. Could anybody help me how to store the phone number for a user and also how to use it to login the user.</div></div>
<br></span>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br><br clear="all"><div><br></div></div></div><span><font color="#888888">-- <br><div><div dir="ltr">- Anunay</div></div>
</font></span></div>
</blockquote></div><br></div>
_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></blockquote></div>
</div></div></blockquote></div><br></div>