umbraco-mfa-login-provider

To add two-factor authentication setup UI to the Umbraco backoffice, you implement a custom MFA login provider by registering an mfaLoginProvider extension type manifest and building a lit-element interface for QR secret enrollment and 6-digit PIN validation.

The Umbraco MFA login provider validates user enrollment by loading setup data from the Umbraco management API endpoint and using a provided callback to validate the authenticator secret and 6-digit code, returning an optional error if validation fails.

Yes, you can use lit-element to build a custom two-factor authentication interface for Umbraco by wiring it to your backend ITwoFactorProvider and calling the Umbraco management API setup and enable endpoints for provider configuration.

An mfaLoginProvider extension manifest in Umbraco is a registration mechanism that maps your custom two-factor authentication provider alias to a UI element and metadata, enabling the backoffice to display the MFA setup and configuration screen.

Yes, you need a backend ITwoFactorProvider to supply the setup data loaded from the Umbraco management API and to process the verification callback that validates the user submitted 6-digit PIN and secret.