tag:blogger.com,1999:blog-11453666510420443882025-07-18T18:17:10.585-07:00idmlearnerhttp://www.blogger.com/profile/13989049828834643759noreply@blogger.comBlogger1125tag:blogger.com,1999:blog-1145366651042044388.post-4144920795311436802024-11-19T22:35:00.000-08:002024-11-19T22:35:05.438-08:00<p>&nbsp;ForgeRock’s authentication journeys, also known as trees, make it easy to create dynamic, flexible, and secure login flows</p><h3><strong>Prerequisites</strong></h3><ul><li>Access to ForgeRock Access Management (AM).</li><li>Basic understanding of authentication and MFA concepts.</li></ul><div><div><b>Step 1</b>:&nbsp; Log Into the ForgeRock Admin Console</div><div><br /></div><div>Open your browser and navigate to the ForgeRock AM Admin Console.</div><div>Enter your admin credentials and log in.</div><div><br /></div><div><b>Step 2:</b> Create a New Journey</div><div><br /></div><div>Go to Authentication &gt; Trees.</div><div>Click + New Tree and name it “SecureLoginMFA.”</div><div><br /></div><div><b>Step 3:</b> Build the Journey Flow</div><div><br /></div><div><b>Start Node</b>: The default node. All journeys start here.</div><div><br /></div><div><b>Username Collector Node</b>: Drag and drop the Username Collector node.</div><div>Configure it to collect the user’s email or username.</div><div><br /></div><div><b>Password Collector Node</b>: Add the Password Collector node and connect it to the Username Collector.</div><div><br /></div><div><b>Data Store Decision Node</b>: Verify the username and password against your user store.</div><div><br /></div><div>Add a failure branch that directs users to a failure message if credentials don’t match.</div><div><br /></div><div><b>MFA Setup</b>: Add a Push Authentication or HOTP Node for MFA. Link it to the success path of the Data Store Decision Node.</div><div><br /></div><div>Configure the MFA node to integrate with ForgeRock’s push authentication feature.</div><div><br /></div><div><b>Success Node: </b>Connect the MFA node to the Success Node to finalize successful logins.</div><div><br /></div><div><b>Step 4: </b>Test the Journey</div><div>Save and enable the journey.</div><div><br /></div><div>Test it by navigating to:</div><div>https://&lt;hostname&gt;/am/XUI/#login/&amp;realm=/&amp;service=SecureLoginMFA</div><div><br /></div><div><br /></div><div><br /></div><div><br /></div><div><br /></div><div><br /></div></div>idmlearnerhttp://www.blogger.com/profile/13989049828834643759noreply@blogger.com0