Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi guys, im using a self-hosted instance of Ory Kratos and i can not find how to enable TOTP for an account, there are registration flows for Password, OIDC and WebAuthn but i can't seem to figure out how to enable 2FA for an account, I want to use google authenticator as the authenticating application, can someone help me in giving me a walkthrough regarding this, How do i get the identifier and secret url, do i generate one using my own functions or Kratos will provide me with that? and what flows to use to link that url to an account.

Hey, you need to setup Kratos configuration to enable TOTP for identities. When this is enabled, the user should see TOTP option in the settings