Enable OTP in account change password

Extending the server
1

Is it possible to enable the OTP token request within the account password change? This is an additional security policy:

  • the user changes his password by entering the old password, the new password and the confirmation password.
  • the user clicks save
  • if the user has OTP credentials, Keycloak proposes the insertion of the token (exactly as happens for reset flow and login flow)
1 Like
2

Were you able to figure this out? I need to impliment something similer

3

You can try adding a required action to user but not from UI, but from code:

image
image982×222 13.1 KB

Probably it will require some custom provider for reset password, check which one is being used, and create new one with adding this to the user.