0

I have an external identity provider (OpenLdap or AD). I configured Keycloak to federate the users form Ldap server. I'd like to enable OTP flow for these users without impoting them in Keycloak's database. Is there any way or procedure to do it ?

Steve Vinoski
  • 19,847
  • 3
  • 31
  • 46
mohamed.Yassine.SOUBKI
  • 172
  • 1
  • 9

1 Answers1

0

OTP belongs to the user, so user must be imported in the Keycloak DB. So you can do that, but without without importing them in Keycloak's database requirement.

Jan Garaj
  • 25,598
  • 3
  • 38
  • 59
  • what about non LDAP federation, I have a custom user storage provider and OTP configuration is not working for those users – simonC Jan 31 '22 at 16:46