- Account Recovery
- Based on information stored about the user, allow them to reset a potentially forgotten password.
- Administrators can also manually generate these reset tokens, allowing for manual identity verification.
- Two Factor Management
- Allow users to generate and verify a two factor secret which will then be created in both Keycloak and FreeIPA.
- Also provides the ability to disable two-factor, removing the secret from both locations.
- Password Changing
- Provide a central web interface for changing known passwords.
- SMS Number
- Uses common carrier email to SMS bridges to send temporary verification pin. Once verified the user is redirected to the reset page.
- External Email
- Emails a direct link to the reset page.