MFA.SOISecure verification

Verification service

This service verifies that somebody is who they say they are

Applications send people here to prove a second factor — an authenticator app, or a one-time code by email, SMS, WhatsApp or voice call. Those applications never see the code, and never hold the secret behind it.

There is nothing to browse. If you arrived here by following a link, that link has expired — go back to the application you came from and start again.

If you are here to sign in

Your own MFA settingsReached by verifying from the application you use — this explains how.How to get in
AdministrationFor people who administer this platform or a tenant on it.Sign in

If you are integrating an application

Start from the discovery document. It names the endpoints, the factors and the channels this deployment actually supports, so nothing has to be hard-coded against it.

Discovery
/.well-known/mfa-configuration
Signing keys
/.well-known/jwks.json
Liveness
/v1/health/live
Issuer
https://mfalpsingh.test.soi.co.in

Every result this platform issues is signed, short-lived and usable once. Verify it against the published keys before granting anything — the signature is the only part of a result worth trusting.