Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hello Ory folks, I’ve seen it asked a few times here but never answered: is it possible to add support for 2FA with email/SMS codes to Kratos currently? If not, are there any plans to implement this feature?

~Bump…I’m also very interested in whether there is any sort of plugin feature in kratos to allow integration of SMS-based 2FA.~

Bump ^
I’m also interested to know if there is any sort of plugin feature in Kratos to allow integration of SMS-based 2FA.

I'm not aware of existing implementations, but this should be doable using a flow-interrupting webhook <https://www.ory.sh/docs/guides/integrate-with-ory-cloud-through-webhooks#flow-interrupting-webhooks>

Although, I'm not sure if this would allow for a 2FA code one copies from the SMS to some login screen.
But it should definitely be possible to figure out some magic link type system, especially as you'd need a custom server listening to that webhook anyways