levL
ZITADEL7mo ago
9 replies
lev

How to trigger MFA init for a specific user?

I want users in my application to setup MFA (u2f, TOTP, email/sms) . However, I don't want to implement it on my own, and I'd prefer to use the existing UI that I see after first login.
In other words, ideal flow is:

1. User presses a button in my app "setup the MFA", and makes a ZITADEL API call.
2. I log user out
3. User logs in and receives the Zitadels form to setup the MFA.

Q: Why not console?
A: I'd like to show a small amount of functionality, without "Metadata", "Memberships" and "Identity providers"

Q: Why not "Enforce MFA" checkbox?
A: I want to have MFA optional, but allow users to switch it on for themselves at the moment they want.

Q: Why not write it myself?
A: Because docs lack of step by step tutorial how to do it for, for example, U2F and error messages are puzzling.
Was this page helpful?