Authentication Method Reference Values

Authelia leverages RFC8176 in a few areas to communicate and control authorization.

Below is a list of the Authentication Method Reference Values and how we currently support them:

Value	Description	Factor	Channel
mfa	User used multiple factors to login (see factor column)	N/A	N/A
mca	User used multiple channels to login (see channel column)	N/A	N/A
user	User confirmed they were present when using their hardware key	N/A	N/A
pin	User confirmed they are the owner of the hardware key with a pin	N/A	N/A
kba	User used a knowledge based authentication factor	Knowledge	N/A
pwd	User used a username and password to login	Knowledge	Browser
otp	User used TOTP to login	Possession	Browser
pop	User used a software or hardware proof-of-possession key to login	Possession	Browser
hwk	User used a hardware proof-of-possession key to login	Possession	Browser
swk	User used a software proof-of-possession key to login	Possession	Browser
sms	User used Duo to login	Possession	External
face	Unsupported	N/A	N/A
fpt	Unsupported	N/A	N/A
geo	Unsupported	N/A	N/A
iris	Unsupported	N/A	N/A
rba	Unsupported	N/A	N/A
retina	Unsupported	N/A	N/A
sc	Unsupported	N/A	N/A
tel	Unsupported	N/A	N/A
vbm	Unsupported	N/A	N/A
wia	Unsupported	N/A	N/A

Systemd

WebAuthn