Feature
Multi-Factor Authentication
Second-factor and step-up authentication support.
24 providers
61 APIs
16 declared variants
The platform supports or exposes multi-factor authentication — TOTP, SMS, push, passkeys, or hardware keys — including step-up challenges on sensitive operations.
24 API providers on the APIs.io network offer multi-factor authentication. The highest-rated are PropelAuth, Okta, emnify, ThingsBoard, Microsoft Azure Active Directory.
Providers
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Strong 9 Solid coverage with minor gaps
PropelAuthPropelAuth is a B2B SaaS authentication and multi-tenant user management platform purpose-built for organiz...OktaOkta is the workforce identity incumbent — its Identity Cloud platform (also called the Okta Workforce Iden...emnifyemnify is a cloud-native global IoT cellular connectivity provider operating its own mobile core and SuperN...ThingsBoardThingsBoard is an open-source IoT platform for device connectivity, data collection, processing, and visual...Microsoft Azure Active DirectoryMicrosoft Azure Active Directory (Azure AD), now Microsoft Entra ID, is Microsoft's cloud-based identity an...Amazon IAMAmazon Identity and Access Management (IAM) enables you to manage access to AWS services and resources secu...Login.govLogin.gov is the U.S. federal government's secure single sign-on and identity verification service for the ...ZitadelZitadel is an open source identity infrastructure platform providing secure authentication and user managem...ApideckApideck is the leading Unified API that doesn't store sensitive customer data. Build and maintain native in...
Developing 8 Usable, with meaningful gaps to close
Tray.aiTray.ai (formerly Tray.io) is an AI-ready enterprise orchestration platform for data and AI, combining a Me...Amazon CognitoAmazon Cognito is an AWS service that provides authentication, authorization, and user management for web a...ArcadiaArcadia is a clean-energy access and energy-intelligence company that operates Arc, a utility data platform...SoracomSoracom is a global IoT cellular connectivity and platform provider headquartered in Tokyo, founded in 2014...StytchStytch is an authentication and identity infrastructure provider. Its Consumer and B2B APIs cover passwordl...DescopeDescope is a customer and agentic identity access management (CIAM) platform founded in 2022 by veterans of...WorkOSWorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterp...Azure Active DirectoryMicrosoft's cloud-based identity and access management service that helps employees sign in and access reso...
Thin 3 Limited public surface area
AutheliaAuthelia is an open source authentication and authorization server providing multi-factor authentication an...PulseIvanti's secure-access product family, formerly Pulse Secure, acquired by Ivanti in 2020. Three administrat...CasdoorCasdoor is an open-source, AI-first identity and access management (IAM) and MCP gateway authentication ser...
Emerging 2 Early or largely undocumented
What Providers Actually Declared
This feature is a canonical term. These are the free-text strings
providers wrote in their own apis.yml that map onto it.
AAL2 with TOTP, SMS/voice, push, security keys, PIV/CAC, and platform passkeysAdaptive Multi-Factor AuthenticationArcadia Connect hosted credential UI handles utility logins, MFA, and one-time passcodes without partners storing utility credentialsConsumer Authentication API (Magic Links, OTP, OAuth, Passwords, TOTP, WebAuthn / Passkeys, Crypto Wallets, Sessions, Users)Core Essentials at $14/user/mo: Adaptive MFA, Privileged Access, Lifecycle Mgmt, Access GovernanceDrag-and-drop Descope Flows for designing authentication, signup, MFA, step-up, and account-recovery journeys with no codeFIDO2 / PasskeysJWT and API-key (4.3+) authentication, OAuth2 federation, two-factor authMulti-Factor AuthenticationMulti-factor authenticationMulti-factor authentication (TOTP) enforceable per organizationMulti-factor authentication with trusted device fingerprinting (90-day skip window)MyAmFam Digital AppSealed sessions, magic auth, passkeys, social, password, enterprise SSOSoracom Access Management (SAM) — sub-users, roles, IAM-style policy documents, MFAWebAuthn / Passkeys
Scroll for all 16
Work with this as data
Every feature here is available over the APIs.io API and to AI agents over MCP. Features is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.