Re: [keycloak-dev] Revert changing from Google Authenticator to FreeOTP

----- Original Message ----- That's a decent compromise. I just don't want existing developers and their users to believe Google Authenticator support is gone. The protocol is the same, but configuration instructions for users are different. I think we should have a multi-factor authenticator SPI (or just baked it into the authenticator SPI I mentioned before) for this. As well as be able to authenticate it needs to be able to modify the login-totp form and configuration instructions. I think it should be possible to configure what multi-factor authenticators should be available for a realm. Then if there is more than one option users can first select which one they want to use, before being given instructions on how to install and configure the specific mechanism. This SPI would also allow using other things that the standard OTP protocol. For example SMS/email, hardware tokens (i.e. Yubikey). Have a look at http://vimeo.com/72978755 it's pretty cool.