Supported Authentication Factors
📊 Factor Comparison Matrix
Authentication Factor | Mobile App Required | Manual Enrollment | Auto-Available | |
|---|---|---|---|---|
1 | 🔔 REL-IDverify Push | ✅ Required | ❌ No | ✅ Yes* |
2 | 📱 Time-based OTP | ✅ Required | ❌ No | ✅ Yes* |
3 | 🔒 Password | ❌ Not Required | ✅ Yes | ❌ No |
4 | 📲 SMS OTP | ❌ Not Required | ✅ Yes | ❌ No |
5 | 📧 Email OTP | ❌ Not Required | ✅ Yes | ❌ No |
*Automatically available after REL-ID mobile app enrollment
🏗️ Factor Categories
🏢 Enterprise Factors (REL-ID Mobile App Based)
- Automatic Setup: Available immediately after mobile app enrollment
- High Security: Provide strongest authentication security
- Offline Support: Time-based OTP works without internet connection
- Real-time: Push notifications provide immediate authentication
🌐 Web-Only Factors (Manual Enrollment Required)
- Explicit Setup: User must manually register during activation
- Independence: Work without REL-ID mobile app
- Accessibility: Suitable for users who cannot install mobile app
- Flexibility: Multiple communication channels available
⚙️ Administrative Configuration
Hard-Coded vs Configurable Factors
| Authentication Factor | Hard-Coded | Configurable | Admin Control |
|---|---|---|---|
| REL-IDverify Push Notification | ✅ Always On | ❌ No | Cannot disable |
| Time-based OTP (Mobile) | ✅ Always On | ❌ No | Cannot disable |
| Saved Browser (rememberMe) | ❌ Configurable | ✅ Yes | Can enable/disable |
| Password (alwaysAskForPassword) | ❌ Configurable | ✅ Yes | Can force requirement |
| SMS-based OTP | ❌ Configurable | ✅ Yes | Can enable/disable |
| Email-based OTP | ❌ Configurable | ✅ Yes | Can enable/disable |
Configuration Impact
- System Level: Administrators control which factors are available
- User Level: Users can only use factors enabled by administrators
- Login Flow: Available factors determine authentication options presented
- Registration: Factor availability affects user activation process
Updated 15 days ago