Friction

Feature request · Permissions & security · Blocks work

Trusted device option to skip 2FA for 30 days

1 source thread · first seen 2021-11

Summary

Users want Keycloak to remember a device after two-factor authentication so they only enter the second factor periodically; Keycloak does not have this.

Affects
End users and realm admins
Workaround
A proof-of-concept custom extension exists.

Evidence

Excerpts are copied word for word from the source; follow the link to read it in full.

“As a user I want to only input two factor authenticator every 30 days”

Report this item