Get a specific MFA Provider.

ID of the object.

Name of the object.

Notes for the object. Used for documentation purposes.

Create date.

Last update date.

The type of the MFA Provider. "DefaultTimeBased" and "Fido2" are built-in, new ones cannot be created.

Port to connect.

The input type used in the client to enter the MFA code.

• "Masked" - The input is masked the same way as a password field.
• "Numeric" - The input is marked as a numeric input.
• "Text" - The input is handled as a regular plain text field.

Radius protocol to use while authenticating users.

Timeout in seconds before giving up on response.

Defines the multi-factor authentication flow for RADIUS.

• "OneFactor" - The input from the user is sent as password and the response is used for result.
• "Challenge" - Before prompting the user, Controller sends a challenge request to the RADIUS server using "challengeSharedSecret" or the user password. Data from the response is used with user input to send the second RADIUS authentication request.
• "Push" - "challengeSharedSecret" or the user password is sent to RADIUS which triggers an external authentication flow. When the external authentication flow returns success, the MFA attempt is authenticated.

-> If enabled, the Client will send the cached password instead of using challengeSharedSecret" to initiate the multi-factor authentication.