Custom Mobile MFA Workflows in iOS/Android apps

Appdome-Threat Events provide a framework to initiate a multi-factor authentication workflow inside a mobile app at any point in the application logic

This Knowledge Base article explains how to build custom MFA workflows inside Android and iOS apps.

We hope you find this knowledge base useful and enjoy using Appdome!

About Building Custom Mobile MFA Workflows in iOs and Android apps

Building Multi-Factor Authentication inside Android and iOS apps involves several significant considerations. Perhaps the most significant consideration is “where” and “when” the Multi-Factor workflow will take place inside the app. Usually, an MFA workflow is initiated after a login sequence. In this use case, the client and the server are built to handle the basic authentication sequence (User –> launches app –> enters credentials –> credentials verified by the server –> user issued a token or cookie allowing access to the app) and, thereafter, the MFA workflow is initiated.

But, what if the app developer wants the MFA workflow to occur at some point other than immediately after login? In these cases, Appdome-Threat Events provides a framework to initiate a multi-factor authentication workflow at any point in the application logic. 

This article will demonstrate how a mobile developer can use Appdome can initiate an MFA workflow inside an Android or iOS app, at any point in the client or server application logic.

Prerequisites for Building Custom Multi-Factor Authentication Workflows Inside Android and iOS Apps With Appdome-Threat Events

In order to use Appdome-Threat Events you need:

Using Appdome-Threat Events to Build Custom Mobile MFA Workflows

Developer’s Flow:

  1. When the App wants to trigger an MFA sequence. it will send a Threat-Event to Appdome
  2. Appdome Mobile MFA will begin the authentication flow as described here, Using Appdome’s Dynamic UI
  3. When the authentication flow has completed, Appdome sends a notification to the app which contains if the authentication was successful and information extracted from the tokens.

Since each MFA provider has different requirements and MFA options, the events are described in each related page.

How Do I Learn More?

If you have any questions regarding how to build custom multi-factor authentication workflows inside mobile apps, please contact Appdome support via email at or via the chat window on the Appdome platform.

To zoom out on this topic, visit the Appdome Platform section on our website.

Thank You and Try Appdome!

Thanks for visiting Appdome! Our mission is to make mobile integration easy and offer mobile DevOps an accelerated mobile app lifecycle workflow. We hope we’re living up to the mission with your project. If you don’t already have an account, you can sign up for free.  

Jan Sysmans

Have a question?

Ask an expert

ZoeMaking your security project a success!