# How to present multiple options for authentication?

**URL:** <https://forum.keycloak.org/t/how-to-present-multiple-options-for-authentication/29788>\
**Category:** Getting advice\
**Created:** [March 21, 2025, 6:37pm UTC](https://forum.keycloak.org/t/how-to-present-multiple-options-for-authentication/29788 "2025-03-21T18:37:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![BradleyS](https://avatars.discourse-cdn.com/v4/letter/b/3bc359/32.png) [@BradleyS](https://forum.keycloak.org/u/BradleyS)\
**Post date:** [March 21, 2025, 6:37pm UTC](https://forum.keycloak.org/t/how-to-present-multiple-options-for-authentication/29788/1 "2025-03-21T18:37:33Z")

</div>

As the title states, I want to be able to present the user, in the browser flow, with the ability to present the user with a username field and then the choice of WebAuthN (With the option to set up WebAuthN if not currently set up) or Password with OTP.

I have been trying to follow the documentation presented here for this exact flow (Without registering WebAuthN): [Server Administration Guide](https://www.keycloak.org/docs/latest/server_admin/index.html#creating-a-password-less-browser-login-flow)

However the image in the docs is not as they state in the steps. There are items that are set as disabled in the image. Also, when I set it up this way and the user does not have WebAuthN set up but they do have OTP, the browser flow always presents the user with the OTP screen and never an option to select.

Is there a way to get around the above issue and is there a way to register WebAuthN in the same browser flow without requiring the User Action to be added?

---

<div class="post-metadata">

**Author:** ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)\
**Post date:** [March 24, 2025, 1:07pm UTC](https://forum.keycloak.org/t/how-to-present-multiple-options-for-authentication/29788/2 "2025-03-24T13:07:53Z")

</div>

MFA option selection is (currently) not supported by Keycloak (and I doubt that it will be in near future).  
This is probably a custom extension, you want to use: [Add authenticator for 2FA enrollment by sventorben · Pull Request #17494 · keycloak/keycloak · GitHub](https://github.com/keycloak/keycloak/pull/17494)

---

<div class="post-metadata">

**Author:** ![BradleyS](https://avatars.discourse-cdn.com/v4/letter/b/3bc359/32.png) [@BradleyS](https://forum.keycloak.org/u/BradleyS)\
**Post date:** [March 24, 2025, 2:22pm UTC](https://forum.keycloak.org/t/how-to-present-multiple-options-for-authentication/29788/3 "2025-03-24T14:22:21Z")

</div>

Ah ok. I assume you mean this plugin: [Enforce MFA Authenticator](https://github.com/netzbegruenung/keycloak-mfa-plugins/blob/main/enforce-mfa/README.md)  
Which exists in the [Keycloak MFA Plugin collection](https://github.com/netzbegruenung/keycloak-mfa-plugins).

I also just found this but thank you @dasniko !

---

<div class="post-metadata">

**Author:** ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)\
**Post date:** [March 24, 2025, 2:46pm UTC](https://forum.keycloak.org/t/how-to-present-multiple-options-for-authentication/29788/4 "2025-03-24T14:46:54Z")

</div>

No, I didn’t mean that extension mentioned by you, I even didn’t know this. I meant the one I linked. But there are several approaches out there available…