[keycloak-user] Removing totp authentication in a realm doesn't disable it in the realm.

[Stian Thorgersen]

Hi,

When you add totp as a required user credential all users are required to have totp configured. Removing this doesn't remove totp configuration for users, only the requirement for them to have it.

Once removed users can go to account management and manually remove it themselves, or an admin can remove totp for individual users.

----- Original Message -----
> From: "Ricardo Martinelli de Oliveira" <rmartine at redhat.com>
> To: keycloak-user at lists.jboss.org
> Sent: Thursday, 25 September, 2014 5:56:57 PM
> Subject: [keycloak-user] Removing totp authentication in a realm doesn't disable it in the realm.
> 
> Hello,
> 
> I created a realm for my applications and just for testing purposes I added
> totp as a required user credentials and it worked (I could use Google
> Authenticator to login to my applications) but after removing it the
> keycloak login page still asks for the Google Authenticator token.
> 
> Is it required to remove the token configuration in Google Authenticator to
> definitely remove this step or there's something else I'm missing?
> 
> 
> Regards,
> 
> 
> Ricardo Martinelli de Oliveira
> 
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user