How do I activate TOTP multi-factor authentication for the users of my application?

For more details see the Knowledge Center article with this video: repost.aws/kno...
Akash shows you how to activate TOTP multi-factor authentication for the users of your application.

[@fghtresvbjy543]

Why don't AWS add TOTP functionality into the hosted UI part? Why I have to make my own web just for this simple thing ?

[@clegeard]

Nice video, but I can't find the link to the github repository with the example for Angular, could you provide it please? Thanks

[@CornyFresser]

Great Video, however I can not find the link to the github repository of the demo code. Could you add the link to the description?

[@stephane4487]

Hi, how would you go and use emails instead of Google Authenticator to provide the code?

[@saurabrakshit405]

Amazing Video ! Please make a separate vdo on below topic coz there is no resource available in internet related to this topic. I want to know how to do the Sign Up, Login & other MFA in React-Native App, if I already have a existing backend in AWS Cognito . And have the below details of the existing backend :- aws_cognito_identity_pool_id: aws_cognito_region: aws_user_pools_id: aws_user_pools_web_client_id:

[@weiguo6222]

Video is very helpful. Can we have the link of the source code? Thanks.

[@matebersenadze5690]

Sorry but Cognito is super buggy shit. Cant have optional MFA for some stupid reasons.

[@vasimkhan6476]

Great stuff altogether!

[@tleonel2363]

Please can you share your gitbuh repo. Trying to create a Demo here with Cognito enabling TOTP with MFA

[@gage22171]

Did anybody get a link for the code sample?

[@saurabrakshit405]

If you have any resource please share

[@bhupendrasinghsisodiya5504]

please provide the github repo link. so we can also test it

[@vijaycapri777]

where is the code sample?

[@Gyannea]

Still no source code ...

[@salonisaumya2204]

I have configured aws-cogonito and I have selected required MFA. I want passwordless authentication. but when i give email from frontend it says password is required. What should i do?

[@awssupport]

Sorry for any trouble, Saloni. The Knowledge Center article paired with this video may have the details you need: go.aws/49JYVV5. However, I suggest reviewing our official blog which provides a deeper dive into implementing passwordless auth: go.aws/3QJF3bX. ☁️ ^RN

[@antoniodevcodes]

Does anybody have a code sample for this?

[@FernandoFiguiIguibejeres]

What if i set MFA required from my user pool and then register and sign in user ? how can i execute AssociateSoftwareToken when the InitiateAuth only return a session without Access Token ?

[@awssupport]

Great questions, Fernando! I recommend looking into this Knowledge Center article, which is associated with the video: go.aws/3qFSO2i. ☁️ Additionally, I found these official docs that you may find helpful: go.aws/47AHvZQ & go.aws/3qFSOiO. 🔗 If you run into any difficulties along the way, feel free to reach out to our community of experts on re:Post for further assistance: go.aws/aws-repost. 🤝 ^TE

[@FernandoFiguiIguibejeres]

​@@awssupporti saw this Knowledge center article but its not clear how get the access token in the first step, i supose you get it calling the initiate auth but if you have the MFA required i dont get it before to complete the challenge

[@awssupport]

I apologize for the trouble with this, Fernando. These resources may assist with the process: go.aws/3KJwM5D & go.aws/3KHdaPy. 📄 If these aren't quite what you're looking for, you're also welcome to explore our additional help options here: go.aws/get-help. 🤝 ^TE

[@ashutoshpathak1387]

I've enabled MFA as required. Now, when I initiate auth from CLI, I just get a session token. And I'm unable to complete all steps before session expires. Wondering how I can get access-token instead of session token.

[@deibymanzo6265]

this session token you got is used to complete the MFA, in the second step of MFA you provide the OTP and the session token

[@ashutoshpathak1387]

@@deibymanzo6265 Well, I fixed it. But in a different manner. Earlier in our user pool, mfa was set to mandatory. Then there's a process in b/w where cognito gives a very long secret key, that needs to be put in google authenticatr along with friendly device name. By the time I was able to input this long string in authenticator, the session tokens were getting expired. Fixed it by making mfa optional - so I get access token instead of session token, but in UI force ppl to set up mfa!

[@vivekprasadhela6521]

Very thanks