mfa-totp

What problem does it solve?

This Skill addresses the need for multi-factor authentication (MFA) using Time-based One-Time Passwords (TOTP) to enhance security in multi-tenant applications.

Core Features & Use Cases

• Policy Decision Function: Determines whether MFA is required for a user based on organizational settings.
• Four-State Login State Machine: Handles pending, MFA enrollment, MFA challenge, and active states.
• MFA Required Toggle: Enables or disables MFA at the organizational level.
• Encrypted Secret Storage: Stores user secrets securely using AES-256-GCM encryption.
• Recovery Codes: Provides single-use recovery codes for account recovery.
• Admin Recovery Setup: Offers self-service, peer reset, support reset, and superadmin break-glass recovery options.
• Trusted Device Piggyback: Utilizes the existing session cookie for trusted device functionality.
• Enrollment UX: Facilitates user enrollment and recovery code generation.

Quick Start

Use the mfa-totp skill to enroll in multi-factor authentication on your account.