Authentication Method Reference Values
Authelia leverages RFC8176 in a few areas to communicate and control authorization.
Below is a list of the Authentication Method Reference Values and how we currently support them:
| Value | Description | Factor | Channel |
|---|---|---|---|
| mfa | User used multiple factors to login (see factor column) | N/A | N/A |
| mca | User used multiple channels to login (see channel column) | N/A | N/A |
| user | User confirmed they were present when using their hardware key | N/A | N/A |
| pin | User confirmed they are the owner of the hardware key with a pin | N/A | N/A |
| kba | User used a knowledge based authentication factor | Knowledge | N/A |
| pwd | User used a username and password to login | Knowledge | Browser |
| otp | User used TOTP to login | Possession | Browser |
| pop | User used a software or hardware proof-of-possession key to login | Possession | Browser |
| hwk | User used a hardware proof-of-possession key to login | Possession | Browser |
| swk | User used a software proof-of-possession key to login | Possession | Browser |
| sms | User used Duo to login | Possession | External |
| face | Unsupported | N/A | N/A |
| fpt | Unsupported | N/A | N/A |
| geo | Unsupported | N/A | N/A |
| iris | Unsupported | N/A | N/A |
| rba | Unsupported | N/A | N/A |
| retina | Unsupported | N/A | N/A |
| sc | Unsupported | N/A | N/A |
| tel | Unsupported | N/A | N/A |
| vbm | Unsupported | N/A | N/A |
| wia | Unsupported | N/A | N/A |