Two Factor Authentication

MembershipReboot supports two-factor authentication. This requires the user to login with their password and then either with a client certificate, or with a code sent via SMS to their mobile phone. If they wish to use a certificate, then this requires the certificate to be associated with the account beforehand. If they wish to use the mobile phone, then this requires the mobile phone number to be registered with the account beforehand.

This coordination will be performed if your application uses the AuthenticationService to handle the user login.

To accept client certificates, it will be necessary to configure IIS for client certificates.

To send SMS messages, it will be necessary for your application to have registered a custom [SmsEventHandler as demonstrated in the samples] (https://github.com/brockallen/BrockAllen.MembershipReboot/wiki/SMS-Configuration).