Feature

Multi-Factor Authentication

Second-factor and step-up authentication support.

24 providers 555 APIs 16 declared variants

The platform supports or exposes multi-factor authentication — TOTP, SMS, push, passkeys, or hardware keys — including step-up challenges on sensitive operations.

24 API providers on the APIs.io network offer multi-factor authentication. The highest-rated are Okta, PropelAuth, emnify, Stytch, Apideck.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 8 Complete, well-documented, and agent-ready
Okta Okta is the workforce identity incumbent — its Identity Cloud platform (also called the Okta Workforce Iden... 28 APIs 72.0 PropelAuth PropelAuth is a B2B SaaS authentication and multi-tenant user management platform purpose-built for organiz... 18 APIs 68.7 emnify emnify is a cloud-native global IoT cellular connectivity provider operating its own mobile core and SuperN... 29 APIs 68.3 Stytch Stytch is an authentication and identity infrastructure provider. Its Consumer and B2B APIs cover passwordl... 47 APIs 67.8 Apideck Apideck is the leading Unified API that doesn't store sensitive customer data. Build and maintain native in... 54 APIs 66.5 Amazon IAM Amazon Identity and Access Management (IAM) enables you to manage access to AWS services and resources secu... 5 APIs 66.4 WorkOS WorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterp... 41 APIs 66.3 Amazon Cognito Amazon Cognito is an AWS service that provides authentication, authorization, and user management for web a... 124 APIs 66.1
Strong 6 Solid coverage with minor gaps
Tray.ai Tray.ai (formerly Tray.io) is an AI-ready enterprise orchestration platform for data and AI, combining a Me... 12 APIs 65.4 Soracom Soracom is a global IoT cellular connectivity and platform provider headquartered in Tokyo, founded in 2014... 45 APIs 63.9 ThingsBoard ThingsBoard is an open-source IoT platform for device connectivity, data collection, processing, and visual... 58 APIs 59.5 Arcadia Arcadia is a clean-energy access and energy-intelligence company that operates Arc, a utility data platform... 15 APIs 59.1 Zitadel Zitadel is an open source identity infrastructure platform providing secure authentication and user managem... 11 APIs 58.6 Microsoft Azure Active Directory Microsoft Azure Active Directory (Azure AD), now Microsoft Entra ID, is Microsoft's cloud-based identity an... 12 APIs 58.5
Developing 4 Usable, with meaningful gaps to close
Login.gov Login.gov is the U.S. federal government's secure single sign-on and identity verification service for the ... 7 APIs 52.3 Azure Active Directory Microsoft's cloud-based identity and access management service that helps employees sign in and access reso... 6 APIs 51.1 Descope Descope is a customer and agentic identity access management (CIAM) platform founded in 2022 by veterans of... 16 APIs 48.2 Casdoor Casdoor is an open-source, AI-first identity and access management (IAM) and MCP gateway authentication ser... 15 APIs 46.9
Thin 2 Limited public surface area
Authelia Authelia is an open source authentication and authorization server providing multi-factor authentication an... 3 APIs 40.4 Zero Trust Architecture Zero Trust Architecture (ZTA) is a security framework defined by NIST SP 800-207 that requires all users an... 5 APIs 35.2
Emerging 2 Early or largely undocumented
Pulse APIs for Ivanti Pulse Secure (formerly Pulse Secure), providing secure remote access VPN, network access co... 3 APIs 26.9 API Dynamics APIDynamics is an AI-driven API security and observability platform that empowers enterprises to gain real-... 1 API 21.9
Minimal 2 Almost no public developer surface
Jar Jar is a Bengaluru-based fintech company operating India's first micro-savings app, enabling tens of millio... 11.0 American Family Insurance American Family Insurance is a private mutual company that offers auto, homeowners, life, renters, umbrella... 7.1

What Providers Actually Declared

This feature is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

AAL2 with TOTP, SMS/voice, push, security keys, PIV/CAC, and platform passkeysAdaptive Multi-Factor AuthenticationArcadia Connect hosted credential UI handles utility logins, MFA, and one-time passcodes without partners storing utility credentialsConsumer Authentication API (Magic Links, OTP, OAuth, Passwords, TOTP, WebAuthn / Passkeys, Crypto Wallets, Sessions, Users)Core Essentials at $14/user/mo: Adaptive MFA, Privileged Access, Lifecycle Mgmt, Access GovernanceDrag-and-drop Descope Flows for designing authentication, signup, MFA, step-up, and account-recovery journeys with no codeFIDO2 / PasskeysJWT and API-key (4.3+) authentication, OAuth2 federation, two-factor authMulti-Factor AuthenticationMulti-factor authenticationMulti-factor authentication (TOTP) enforceable per organizationMulti-factor authentication with trusted device fingerprinting (90-day skip window)MyAmFam Digital AppSealed sessions, magic auth, passkeys, social, password, enterprise SSOSoracom Access Management (SAM) — sub-users, roles, IAM-style policy documents, MFAWebAuthn / Passkeys

Scroll for all 16