Multi-Factor Authentication on the Cutting Edge
summary
privacyIDEA is a deployed multi‑factor authentication system that manages tokens such as TOTP/HOTP, U2F, Nitrokey/GPG smartcards and paper tokens via a REST API and FreeRADIUS integration. It supports staged migration from proprietary backends (like RSA and SMS) by proxying and re‑issuing tokens, and provides time‑dependent policies, an enrollment wizard, audit logging of authentications, a Python event‑handler framework, and database-backed installations with rolling migration workflows.
AI-written summary · about
chapters (10)
- 0:00MFA introduction
- 3:20NIST SMS authentication
- 10:48Possession factors crypto keys
- 17:17Demo PrivacyIDA auth
- 25:37PrivacyIDA token updates
- 32:46Time-based policy handlers
- 36:39Migrating proprietary MFA
- 41:30PrivacyIDA migration
- 47:34NitroKey support future
- 50:05Summary PrivacyIDA outlook
related talks
51mCentrally managed Multi Factor Authentication with privacyIDEA
19mHybrid MFA: Balancing On‑Premise Control and Cloud Integration with privacyIDEA
19mAdvanced Authentication Framework
17mImplementing Multi-factor Authentication
26mHolistic Authentication
47mThe Psychology of Multi-Factor Authentication
12minterviewed – Rich Smith
28mAuthentication Digital Financial Services