how to auto detect device name while settingup 2fa for user #19836

sangameshwar550 · 2023-04-20T09:52:26Z

sangameshwar550
Apr 20, 2023

Hi All,
I am looking to Auto detect the scanned device name programmatically while doing 2fa setup ex: Phone 11 or Oneplus nord 2, etc...,
is there any way provided by keycloak to do so
Thanks in advance

jbman · 2023-04-21T17:19:48Z

jbman
Apr 21, 2023

If you mean TOTP authenticator app based 2FA: The QR coode only provides data from Keycloak to the authenticator app. Nothing is sent back to Keycloak.

3 replies

phenomuser Apr 24, 2023

Hi Johannes Bergmann,

Thanks for the replay, Yeah I was asking about TOTP based 2FA,
Is there any way or any 3rd party Keycloak plugin to auto detect the TOTP authenticator device name programetically.

Regards,
Sanga

darius-m Apr 25, 2023

No, I doubt it's possible. As @jbman mentioned, the OTP applications do not send anything back to the Keycloak server, as it is not required, so Keycloak only ever gets the user's input.

TOTP is an extension of the HOTP specification that uses the current time instead of a number of clicks - it basically runs hash(str(int(current_time / 30s)) + secret_salt) to generate the OTP. Both the server and the application know the secret salt, and the current time is readily available. This is why it's necessary to use NTP (or other time sync protocols) on both the server and the device that generates the codes; otherwise, the codes that are generated by the server and the device will differ even if the same salt is used. To account for time skews, a look-around window is used (usually one or two intervals), so more than one code is accepted. However, since there is not communication between the application and Keycloak, large time skews will result in invalid codes, without the option to automatically adjust in case of an error.

sangameshwar550 Apr 28, 2023
Author

HI @darius-m , thanks for the replay,
Since its not possible, we are going with manually asking user to provide the device name

Thanks :)

Navigation Menu

Repository navigation

how to auto detect device name while settingup 2fa for user #19836

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 3 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

how to auto detect device name while settingup 2fa for user #19836

Uh oh!

sangameshwar550 Apr 20, 2023

Replies: 1 comment · 3 replies

Uh oh!

jbman Apr 21, 2023

Uh oh!

Uh oh!

phenomuser Apr 24, 2023

Uh oh!

darius-m Apr 25, 2023

Uh oh!

sangameshwar550 Apr 28, 2023 Author

sangameshwar550
Apr 20, 2023

Replies: 1 comment 3 replies

jbman
Apr 21, 2023

sangameshwar550 Apr 28, 2023
Author