Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

image.png

how to _require_ mfa?

I've configured MFA,

But it only asks for MFAon login, _if_ the user has configured mfa. If the user didn't, then he is allowed to login without MFA. We want to enforce MFA for users.  How to do this?