Centrally managed Multi Factor Authentication with privacyIDEA

on YouTube ↗51m

" summary

Central on‑prem MFA with privacyIDEA installs on a single server or redundant SQL cluster, is a Python web app exposing a REST API and SPA UI, and supports containers for Kubernetes; it manages about 30 token types (TOTP, SMS, paper, SSH keys, U2F/WebAuthn/passkeys), offers plugins for FreeRADIUS, Keycloak, Nextcloud and ADFS/Entra ID, enforces policy scopes and conditions, triggers actions via event/script handlers, and enables offline Windows login via WebAuthn public keys.

AI-written summary · about

" chapters (14)

1. 0:00Introduction to MFA
2. 1:23What is privacyIDEA
3. 3:13Design and architecture
4. 4:17Flexible user/token/app management
5. 7:11User resolvers and realms
6. 10:06Application abstraction and plugins
7. 12:58Central token enrollment
8. 15:05Policy configuration
9. 17:38Event handlers and automation
10. 20:31FIDO2, WebAuthn and passkeys
11. 27:44Windows login with credential provider
12. 34:35Live demo
13. 44:04Next steps and resources
14. 45:11Q&A

" related talks

• 01h 00mMulti-Factor Authentication on the Cutting EdgeCornelius Kölbel · FrOSCon 2016
• 19mHybrid MFA: Balancing On‑Premise Control and Cloud Integration with privacyIDEAJelina Unger · foss-north 2026
• 19mAdvanced Authentication FrameworkJim Routh · Authenticate 2022
• 17mImplementing Multi-factor AuthenticationJacob Kaplan-Moss · dotSecurity 2016
• 26mHolistic AuthenticationBassam Al-Khalidi · Authenticate 2022
• 32mModern And Secure IAM For Modern ApplicationsVinod Anandan · OWASP Global AppSec Amsterdam 2019
• 47mAuthentication and Authorization in the World of Media and Identity ProvidersGrzegorz Krol · Confitura 2019
• 01h 09mMultifactor Authentication in the CloudDustin Kirkland · Collaboration Summit 2013