You can use Advanced Authentication.

There is a cookbook for enabling AA for forgotten password module, but configuration is quite similar for "normal" SSPR login.

Only change is that in SSPR you need to configure OAuth SSO (Settings >Single Sign On (SSO) Client > OAuth) instead of forgotten password OAuth (Modules > Public > Forgotten Password > Profiles > default > OAuth)

Kind regards,

Sebastijan

btw, you can use any external oauth/oidc provider for SSO as long as external IDP provides user's attribute that can be matched by SSPR in local directory.

My apologies if it wasn't clear, but I am wanting to have MFA for the SSPR 'LOGIN' page, not forgotten password.

wferguson said:

My apologies if it wasn't clear, but I am wanting to have MFA for the SSPR 'LOGIN' page, not forgotten password

That's exactly what I'm trying to tell you. It's similar configuration in SSPR, just different place. Settings >Single Sign On (SSO) Client > OAuth instead of Modules > Public > Forgotten Password > Profiles > default > OAuth

My apologies...I see now. I was hoping MFA could be accomplished using Twillio and not have to purchase yet another product, like the documentation speaks to needing buy the Advanced Authentication server for this option. Thank you

Hi! Please note that you may be entitled to use Advanced Authentication Limited free of charge if you already have qualifying products. Have a look in: https://www.microfocus.com/media/documentation/additional-license-authorizations-for-identity-and-access-management-products-documentation.pdf

Regards,

Tor Harald Lothe

Thank you, I will inform my manager of this.