more Firebase Auth MFA options?

[Jacob]

Hi Google/Firebase folks,

Any chance we can get TOTP and WebAuthN options for MFA? Our customers really want these features! Google has indicated that SMS is an insecure method for MFA:

https://www.zdnet.com/article/google-wants-you-to-stop-using-its-sms-two-factor-sign-in/

Microsoft too:

https://www.zdnet.com/article/microsoft-urges-users-to-stop-using-phone-based-multi-factor-authentication/

Thanks.

[Lander Beeuwsaert]

We would also be interested.

2FA is a reasonable request I think.

Seeing that it has become so popular over the last few years I would think firebase should implement it to provide a complete authentication solution.

I have read there is email + sms message if you combine with google cloud, but I would expect a better integration + functionality like email + google authenticator app.

Are there any plans about this?

[peter...@gmail.com]

Hi lander Totp is meant for Strong google admin and is not allowed for transfer. If you want it have to buy it from google store.

Sent from Yahoo Mail on Android

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/b1a2ea6f-175f-4c5b-a245-3083351ca2ffn%40googlegroups.com.

[Ark Dev]

Following up on this, SMS is really not a secure MFA any more. Google have a great Authenticator app. Would be really useful to have this as a firebase option.

Does anyone have a reference implementation of a 3rd party non-SMS OTP solution?

[Kane Jeong]

+1 on this. The SDK seems to be imply they were going to support more factors but it's been years and there's no update on newer ones being supported.

[Alex Devine]

Do my eyes deceive me??? SOO excited to see this after many years, I think this page on TOTP MFA was just added today: https://cloud.google.com/identity-platform/docs/admin/enabling-totp-mfa

[Ark Dev]

Oh wow! Finally.