Allow MFA login #261

New issue

Open

opened 2026-11-10 14:18:24 +00:00 by aaperis · 0 comments

aaperis commented

2026-11-10 14:18:24 +00:00

(Migrated from github.com)

Please describe the feature

As a user, I want to be able to sign-in using multi-factor authentication so that my session is protected according to latest security standards.

Detailed description

LSAAI has the option to enable MFA using a code generating app and this level of security may be a prerequisite in some projects so we need to support it.

AC (TBD)

The user can sign-in with LSAAI using MFA if they have enabled it.

Additional context

The GS team has already implemented this for sda-auth so they can provide input.
Whether MFA should be mandatory or not is up to discussion (probably not).

## Please describe the feature As a user, I want to be able to sign-in using [multi-factor authentication](https://refeds.org/profile/mfa) so that my session is protected according to latest security standards. ## Detailed description LSAAI has the option to enable MFA using a code generating app and this level of security may be a prerequisite in some projects so we need to support it. ## AC (TBD) - [ ] The user can sign-in with LSAAI using MFA if they have enabled it. ## Additional context - The GS team has already implemented this for sda-auth so they can provide input. - Whether MFA should be mandatory or not is up to discussion (probably not).