Title: Multi factor authentication
Last modified: December 14, 2022

---

# Multi factor authentication

 *  Resolved [yaseico](https://wordpress.org/support/users/yaseico/)
 * (@yaseico)
 * [3 years, 5 months ago](https://wordpress.org/support/topic/multi-factor-authentication-2/)
 * Hi, I haven’t used the plug-in yet but was trying to find some information and
   documentation describing how multi factor authentication is handled by the plug-
   in.
 * For example, my site would normally require MFA for users. Is there a way to 
   enforce use of MFA for a social login like Microsoft.
 * Some Microsoft accounts would have MFA configured within Microsoft and others
   not. I would like to ensure all users apply MFA in order to access my site.
 * Thanks

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Support [Laszlo](https://wordpress.org/support/users/laszloszalvak/)
 * (@laszloszalvak)
 * [3 years, 5 months ago](https://wordpress.org/support/topic/multi-factor-authentication-2/#post-16290334)
 * Hi [@yaseico](https://wordpress.org/support/users/yaseico/)
 * Nextend Social Login doesn’t have a 2 Factor / Multi factor authentication feature.
   That is something that is done by rather the provider.
 * So e.g. a person can enable 2 Factor Authentication in the Facebook account:
    - [https://www.facebook.com/help/148233965247823](https://www.facebook.com/help/148233965247823)
 * When it is enabled something like this would happen:
    - The person presses the Facebook button on your website.
    - Nextend Social Login redirects the user to the Facebook authorization endpoint.
    - If the person is not logged to a Facebook account already in the browser, 
      then Facebook will display then authentication screen.
    - There the person should enter the Facebook login credentials and login
    - Before the user gets logged in to the Facebook account, Facebook will request
      the user to complete the 2 factor authentication.
    - Once the 2 factor authentication is completed, Facebook will display the consent
      screen – [https://developers.facebook.com/docs/facebook-login/guides/permissions](https://developers.facebook.com/docs/facebook-login/guides/permissions)–
      if the person hasn’t authorized your App already ( or the consent has expired).
    - Once it is done, Facebook will redirect back to your site, we will continue
      to OAuth communication to get the user data, and we will register a new account
      or log the user in to an existing account.
 * So as you can see this 2 factor authentication is not managed by the plugin, 
   but by the official provider. If the person doesn’t have 2 Factor authentication
   enabled in the social media account then you can not force that, I am sorry.
 * Best regards,
    Laszlo.
 *  Thread Starter [yaseico](https://wordpress.org/support/users/yaseico/)
 * (@yaseico)
 * [3 years, 5 months ago](https://wordpress.org/support/topic/multi-factor-authentication-2/#post-16290348)
 * Hi [@laszloszalvak](https://wordpress.org/support/users/laszloszalvak/)
 * Thanks for the clarification and detailed explanation. What you explained makes
   sense to me.
 * I appreciate your quick reply.
 * Thanks
 * Tim

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Multi factor authentication’ is closed to new replies.

 * ![](https://ps.w.org/nextend-facebook-connect/assets/icon.svg?rev=3336394)
 * [Nextend Social Login and Register](https://wordpress.org/plugins/nextend-facebook-connect/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/nextend-facebook-connect/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/nextend-facebook-connect/)
 * [Active Topics](https://wordpress.org/support/plugin/nextend-facebook-connect/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/nextend-facebook-connect/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/nextend-facebook-connect/reviews/)

## Tags

 * [mfa](https://wordpress.org/support/topic-tag/mfa/)

 * 2 replies
 * 2 participants
 * Last reply from: [yaseico](https://wordpress.org/support/users/yaseico/)
 * Last activity: [3 years, 5 months ago](https://wordpress.org/support/topic/multi-factor-authentication-2/#post-16290348)
 * Status: resolved