Support for Multi factor authentication

[#1]

Our app would like to add support for 2 factor or Multi-factor authentication. Do Apigee support

[anilsr]

@Vevek , Welcome to Apigee community.

I feel above question is off-topic. Can you please clarify what exactly is your query ? Is it related to API development / App Development ? Which Apigee product are you using ? Edge / Baas ? Is it purely related to app development & implementing 2FA ?

[madhans]

Apigee can easily support multi-factor authentication use cases.

OTP is a popular second factor in authentication. An API can be built to send OTP through SMS, email or push channels that is triggered after the first factor is completed.

With the cache feature OTP generation is a breeze.

1) Create an object cache with required TTL

2) During OTP generation, create a random number and populate cache with the OTP as the key. Value can be (username, attempt count, channel etc.,)

3) Send OTP using the required channel

4) Create a second API to accept OTP

5) Do a lookup of the cache with the OTP

6) When the lookup succeeds the OTP flow is completed.

Apigee's cache is durable and expires after the TTL making it a perfect fit for OTP.