Re:Rapidly Build SaaS apps on ASP.NET/ServiceStack based on ...
by TriNetra on Tuesday April 06, 2021 @11:33PM
(#26720318)
Yes you can integrate with any provider. the pipeline [0] is the enforcement part – performing MFA checks like "Is MFA enabled on user? is it applicable for this request (can be turned off for programmatic api-based access, for example) etc."
It's the job of the application to prompt caller for 2FA input and verify it using the provider/device of your choice.
But to save you time even with that implementation, ASPSecurityKit has a category of products called source packages, which provide full implementation of several commonly needed functionality, including 2FA workflow [1], installed right into your project as source code, so you can switch to any MFA provider easily by modifying the code that sends MFA token to the device.
It's the job of the application to prompt caller for 2FA input and verify it using the provider/device of your choice.
But to save you time even with that implementation, ASPSecurityKit has a category of products called source packages, which provide full implementation of several commonly needed functionality, including 2FA workflow [1], installed right into your project as source code, so you can switch to any MFA provider easily by modifying the code that sends MFA token to the device.
0: https://aspsecuritykit.net/docs/article/the-security-pipelin...
1: https://aspsecuritykit.net/docs/article/source-packages/?pac...