Set Up TOTP Multi-Factor Authentication in Keycloak
Turn on Keycloak MFA with TOTP for every user, including existing ones — the OTP policy, the two flow changes that actually enforce it, and what silently breaks.
Build a Custom Keycloak Authentication Flow
Build a Keycloak custom authentication flow with conditional execution — the requirement model, a tested kcadm sequence, and the five ways it silently breaks.