> ## Documentation Index
> Fetch the complete documentation index at: https://docs.authsignal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using Authsignal with WSO2 Identity Platform

> Learn how to add MFA to your WSO2 Identity Platform login flow with Authsignal.

This guide shows how to add MFA to a [WSO2 Identity Platform](https://wso2.com/asgardeo/) login flow using Authsignal. The integration is configured as a **Custom Authentication** connection in WSO2 Identity Platform that points to an Authsignal-hosted adapter endpoint.

## Overview

WSO2 Identity Platform's Custom Authentication lets you plug in an external authentication service as a step in any login flow. The Authsignal adapter implements that contract and delegates challenge orchestration to Authsignal, so users are redirected to the Authsignal [pre-built UI](/implementation-options/prebuilt-ui/overview) to complete an MFA challenge before being returned to WSO2 Identity Platform to finish signing in.

## Prerequisites

* A WSO2 Identity Platform organization with an application configured for login.
* An Authsignal tenant with at least one authenticator enabled.

## Authsignal configuration

<Steps>
  <Step title="Enable authenticators">
    In the [Authenticators section of the Authsignal Portal](https://portal.authsignal.com/organisations/tenants/authenticators), enable the authentication methods you want to offer as MFA factors (for example, SMS OTP, Email OTP, or Passkeys).
  </Step>

  <Step title="Get your API key">
    In the [API Keys section of the Authsignal Portal](https://portal.authsignal.com/organisations/tenants/api), copy your tenant's **Server API key**. You will paste this into the WSO2 Identity Platform connection in the next section.
  </Step>
</Steps>

## WSO2 Identity Platform configuration

### 1. Create the Authsignal connection

In the WSO2 Identity Platform Console, go to **Connections**, click **New Connection**, and choose **Custom Authenticator (Service-based)**. This opens the **Custom Authentication** wizard, which has three steps.

<Frame>
  <img src="https://mintcdn.com/authsignal-23/Zo_reMHMTGVxSURv/images/docs/integrations/wso2-identity-platform/select-custom-authenticator.png?fit=max&auto=format&n=Zo_reMHMTGVxSURv&q=85&s=006a892a58feb4e5e2af99a9f5835d15" alt="Adding the Authsignal connection" width="2212" height="1590" data-path="images/docs/integrations/wso2-identity-platform/select-custom-authenticator.png" />
</Frame>

<Steps>
  <Step title="Authentication Type">
    Select **2FA Authentication** and click **Next**.

    <Frame>
      <img src="https://mintcdn.com/authsignal-23/Zo_reMHMTGVxSURv/images/docs/integrations/wso2-identity-platform/choose-2fa.png?fit=max&auto=format&n=Zo_reMHMTGVxSURv&q=85&s=f6d00c52d50359e81c85eda9725c50f0" alt="Select authentication type" width="2218" height="1830" data-path="images/docs/integrations/wso2-identity-platform/choose-2fa.png" />
    </Frame>
  </Step>

  <Step title="General Settings">
    Provide an **Identifier** and a **Display Name**.
  </Step>

  <Step title="Configuration">
    Set the **Endpoint** to the Authsignal adapter URL for your tenant's region:

    <CodeGroup>
      ```text US (Oregon) theme={null}
      https://us-connect.authsignal.com/integrations/wso2-asgardeo/authenticate
      ```

      ```text EU (Ireland) theme={null}
      https://eu-connect.authsignal.com/integrations/wso2-asgardeo/authenticate
      ```

      ```text AU (Sydney) theme={null}
      https://au-connect.authsignal.com/integrations/wso2-asgardeo/authenticate
      ```

      ```text CA (Montreal) theme={null}
      https://ca-connect.authsignal.com/integrations/wso2-asgardeo/authenticate
      ```
    </CodeGroup>

    Under **Endpoint Authentication**, select **Basic** as the scheme. Paste your Authsignal tenant's **Server API key** into the **Username** field. The **Password** field is required by WSO2 Identity Platform but is not used by the adapter - enter any non-empty placeholder value. Click **Finish**.

    <Frame>
      <img src="https://mintcdn.com/authsignal-23/Zo_reMHMTGVxSURv/images/docs/integrations/wso2-identity-platform/copy-endpoint.png?fit=max&auto=format&n=Zo_reMHMTGVxSURv&q=85&s=85fffea3b2d9af5e72b413b2a8d8ecce" alt="Adding the endpoint" width="2448" height="1838" data-path="images/docs/integrations/wso2-identity-platform/copy-endpoint.png" />
    </Frame>
  </Step>
</Steps>

### 2. Add the connection to your login flow

<Steps>
  <Step title="Open your application">
    In the WSO2 Identity Platform Console, go to **Applications** and select the application you want to add MFA to.
  </Step>

  <Step title="Edit the login flow">
    On the **Login Flow** tab, keep your existing first step (for example, username and password) and add a new step.

    <Frame>
      <img src="https://mintcdn.com/authsignal-23/Zo_reMHMTGVxSURv/images/docs/integrations/wso2-identity-platform/add-authsignal-mfa.png?fit=max&auto=format&n=Zo_reMHMTGVxSURv&q=85&s=9dae8b55307cee8fb120257121ce7c1b" alt="Adding the Authsignal authenticator step" width="2306" height="1484" data-path="images/docs/integrations/wso2-identity-platform/add-authsignal-mfa.png" />
    </Frame>
  </Step>

  <Step title="Add the Authsignal authenticator">
    In the new step, add the `Authsignal MFA` connection you created. This step will run after the user completes the first factor. Then click **Update** to save the flow.
  </Step>
</Steps>