Implement MFA using Google Authenticator (TOTP)

[scavallaro4]

Hi,
I can’t seem to find anything related to the topic in the documentation.
Was anyone able to implement MFA based on TOTP and Google Authenticator App?
Thanks

[salbertelli01]

Hi scavallaro4,

Thank you for reaching out to the community.

There is a use case blog available within the Community that may provide some assistance for you. This document provides a step-by-step guide on how to create a user journey in Identity Cloud that prompts the user to authenticate with TOTP for second-factor authentication.

Use case: Configure OATH-based token two-factor authentication in ForgeRock Identity Cloud

Use case overview Allowing two-factor authentication using hardware or software-based tokens based on OATH standards for strong authentication is a very common use case that is easily implemented in ForgeRock Identity Cloud. ForgeRock provides built-in support for HMAC one-time passcode (HOTP) and time-based one-time passcode (TOTP) as authentication and authorization methods. These methods authenticate based on codes generated using a secret shared previously by the ForgeRock server and an OA…

The instruction uses the ForgeRock Authenticator app, but it’s worth noting that ForgeRock also supports other third-party OATH-compliant authenticators, such as Google Authenticator.

I hope this information helps you verify the steps you’ve taken to implement MFA using Google Authenticator (TOTP).

Best regards,
Sheila

[scavallaro4]

Is it possible to use authentication module and chain to perform the same operations?
Especially the device registration