Deploying SMS & Email Multi-Factor Authentication in Keycloak with Docker Compose and Terraform
Mickael Ambiehl, Christophe Kyvrakidis
Deploying SMS & Email Multi-Factor Authentication in Keycloak with Docker Compose and Terraform
In this one-hour workshop, we will build a complete platform enabling SMS OTP and Email OTP authentication in Keycloak, two authentication factors that are not available natively. Participants will deploy the entire stack using Docker Compose (Keycloak, PostgreSQL, MailHog, Grafana, Prometheus, and Tempo) and automate its configuration with Terraform. We will explore how to integrate custom SPIs, create conditional authentication flows, and manage user enrollment. Through hands-on demonstrations, attendees will validate end-to-end SMS and Email authentication journeys in a fully self-contained simulation environment with no external dependencies. Finally, we will leverage observability tools to trace and troubleshoot MFA authentication flows. The workshop is practical, reproducible, and can be completed with only a few commands.
Digital sovereignty, public sector and OSPOs
Decentralisation in practice