alpacon workspace mfa-methods

Display the MFA methods the workspace allows. The same list decides whether a passkey sign-in counts as MFA: it does when the list is empty or includes biometric authentication or a hardware security key. See Passkeys and allowed MFA methods.

Note
Alpacon Cloud only—not available in self-hosted deployments.

Aliases: mfa-methods, mfa

bash
alpacon workspace mfa-methods [flags]

Options

bash
  -h, --help   help for mfa-methods

Examples

bash
alpacon workspace mfa-methods
alpacon ws mfa-methods
alpacon ws mfa

Output

The command prints the workspace’s MFA settings as JSON:

  • allowed_mfa_methods: the allowed methods, with values such as webauthn-roaming (hardware security key), webauthn-platform (biometric authentication), otp (one-time password), email, and recovery-code. An empty list means no restriction.

Read the passkey result from allowed_mfa_methods. The output may also include passkey_as_mfa, a retired setting that no longer changes whether a passkey sign-in counts as MFA.

Last updated: