# Can we build a Two-Factor Authentication (2FA) flow within Ignition?

**URL:** <https://forum.inductiveautomation.com/t/can-we-build-a-two-factor-authentication-2fa-flow-within-ignition/114244>\
**Category:** Ignition\
**Tags:** perspective\
**Created:** [February 28, 2026, 11:53am UTC](https://forum.inductiveautomation.com/t/can-we-build-a-two-factor-authentication-2fa-flow-within-ignition/114244 "2026-02-28T11:53:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rajashekar\_Reddy](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@Rajashekar\_Reddy](https://forum.inductiveautomation.com/u/Rajashekar_Reddy)\
**Post date:** [February 28, 2026, 11:53am UTC](https://forum.inductiveautomation.com/t/can-we-build-a-two-factor-authentication-2fa-flow-within-ignition/114244/1 "2026-02-28T11:53:21Z")

</div>

Dear Team,

I am looking for guidance on implementing a **Two-Factor Authentication (2FA)** flow within Ignition( **Internal** ).

Currently, we have developed a custom login screen that sends an OTP via email and then redirects to the Gateway login page. While the initial login is working, we are having trouble redirecting the user to an OTP verification page immediately after a successful Gateway login before they reach their intended destination.

I attempted to use the **onAuthChallengeCompleted** hook to trigger the redirect to the OTP page, but it did not work as expected. Could you please suggest the best approach or conditions required to achieve this workflow?

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [February 28, 2026, 9:49pm UTC](https://forum.inductiveautomation.com/t/can-we-build-a-two-factor-authentication-2fa-flow-within-ignition/114244/2 "2026-02-28T21:49:46Z")

</div>

I'd probably suggest using a 3rd party self hosted IdP for now as it will be handled more securely and possibly even support passkeys if you want that functionality.

Look into Authentik, KeyCloak, Zitadel, and PocketID among other options.