I am trying to find a way to setup a (optional) TOTP for an specific user using an endpoint, but I couldn't find anything like that in the documentation. Is that even possible? is it something that you will include at some point in your roadmap?

The scenario is a native mobile app using keycloak through endpoints (registration, login, logout, etc). I know that's not the way you recommend, but sadly I cannot change that.

TOTP is currently working if I set it up using the account management console and I'm trying to re use those calls, but they use cookies included in the requests and that model just doesn't fit on my requirements.

I'd really appreciate a little guidance if it is possible to create an SPI (I have some already) to do such task.

Thanks in advance,

Regards,

Fab

--