Summary
This chapter described the installation and configuration of Keycloak, an open source product, and how Acme has used mobile OTP authenticators and passwordless WebAuthn to achieve a higher level of security for its workforce.
In the next chapter, we will explore what to do when MFA is not enough. MFA is only part of an IAM solution, but sometimes MFA (or certain types of MFA) must not be used or only used in conjunction with other products.