Repository navigation
Unexpected OTP Prompt for Role Not Targeted in Custom Authentication Flow #39908
Unanswered
MPManu17121980
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Hi all,
I've defined a custom authentication flow in Keycloak to enforce OTP-based authentication using an authenticator app, but only for users assigned the role EUAdmin.
However, when I create a new user with the role NSCAdmin, they are also being prompted to configure the authenticator app on their first login. Interestingly, this issue does not occur for users with other roles like buyer or LangAdmin.
I'm trying to understand why OTP is being enforced for NSCAdmin, even though it's not part of the OTP condition in the custom flow.
Is there any way in the Keycloak Admin Console to trace or debug how the authentication flow is being applied to a user (e.g., to see which conditions were evaluated or which roles are triggering OTP)?
Any guidance would be appreciated.
Thanks!
All reactions