In order to increase account security VAuthenticator allow to register MFA via email and soon SMS
During the account registration a step to validate the main mail, that is the user_name too, the main mail became a valid MFA channel. It is possible to register multiple email via api.
URI: Post /api/mfa/enrollment
Scope: mfa:enrollment
Request:
{
"mfaChannel": "your mfa channel: mail sms and so on ",
"mfaMethod": "EMAIL_MFA_METHOD, SMS_MFA_METHOD"
}
Response Body:
{
"ticket": "xxxx"
}
Response Status: 201 Created
URI: Post /api/mfa/associate
Scope: mfa:enrollment
Request Body:
{
"ticket": "your mfa ticket",
"code": "your mfa code"
}
Response Status: 204 No Content