# How can i multi factor authentication for login..?

**URL:** <https://forum.ansible.com/t/how-can-i-multi-factor-authentication-for-login/35478>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [July 8, 2021, 2:17pm UTC](https://forum.ansible.com/t/how-can-i-multi-factor-authentication-for-login/35478 "2021-07-08T14:17:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kelly](https://avatars.discourse-cdn.com/v4/letter/k/ac91a4/32.png) [@kelly](https://forum.ansible.com/u/kelly)\
**Post date:** [July 8, 2021, 2:17pm UTC](https://forum.ansible.com/t/how-can-i-multi-factor-authentication-for-login/35478/1 "2021-07-08T14:17:33Z")

</div>

I want to use multi factor authentication for login.  
like… use OTP after ldap login.

The login I’m talking about is login of awx web page.

is it possible ?? Help me

---

<div class="post-metadata">

**Author:** ![ffirg](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/ffirg/32/10029_2.png) [@ffirg](https://forum.ansible.com/u/ffirg)\
**Post date:** [July 9, 2021, 10:08am UTC](https://forum.ansible.com/t/how-can-i-multi-factor-authentication-for-login/35478/2 "2021-07-09T10:08:38Z")

</div>

Firstly, don’t use 2FA for managed node connections. I assume you want to use it for authentication into the platform for user access/control.  
You need to look into SAML as the provider for this. AWX does not provide anything like this OOTB, but simply integrates with a SAML provider, mapping the attributes into AWX teams/users etc  
You will do the bulk of the work with the SAML provider you want to use (Azure AD etc) and then map that into AWX settings.

---

<div class="post-metadata">

**Author:** ![Kim\_Covil](https://avatars.discourse-cdn.com/v4/letter/k/8dc957/32.png) [@Kim\_Covil](https://forum.ansible.com/u/Kim_Covil)\
**Post date:** [July 14, 2021, 12:10pm UTC](https://forum.ansible.com/t/how-can-i-multi-factor-authentication-for-login/35478/3 "2021-07-14T12:10:41Z")

</div>

What I ended up doing was setting up keycloak to do the 2FA and using it as a SAML provider.

Kind Regards,

Kim
