DruID Identity (CIAM) provides consumers with the option to enable multiple authentication factors for their accounts. This includes the utilization of authentication apps such as Google Authenticator or Microsoft Authenticator. DruID is compatible with any app that adheres to the RFC 6238 standard. However, it is recommended to select an app that offers cloud backup capabilities. This ensures easy access recovery in scenarios where the user loses their phone.
Alternatively, users can opt to receive authentication codes via SMS on their mobile phones. DruID offers its own SMS providers and can also accommodate different providers as per organization preferences.
Moreover, Multi-Factor Authentication (MFA) management can be either mandatory or voluntary. In the former scenario, users are obligated to configure MFA following their initial login. Failure to do so will result in the non-receipt of an access_token, thereby restricting access to the account. Conversely, in the latter scenario, users have the choice to activate MFA. To enable this feature, users must access the private area and opt-in accordingly.