MFA implementation strategies and privacy considerations

Implementing mandatory multi-factor authentication (MFA) presents technical and legal challenges for organizations, particularly regarding the use of personal devices. While MFA is a critical tool for reducing account takeover risks, employers often face resistance when requiring employees to install authenticator apps on personal smartphones.

In France, labor laws require employers to provide the necessary tools for work, complicating mandates that rely on private hardware. To address this, the MFA Selector tool has been developed for Keycloak. This authenticator allows administrators to make a second factor mandatory while giving users the choice of method, such as a work computer screen lock, a company-provided security key, or a passkey, rather than forcing the use of a personal phone.