wa2fa is a Keycloak 26.x provider bundle that adds WhatsApp-based authentication features using the Meta WhatsApp Cloud API.

What this plugin provides:

1. WhatsApp OTP as a login step (Authenticator)

2. Phone verification flow (Required Action)

3. Login alerts on successful sign-in (Event Listener)

4. Optional QR scan verification with webhook callback (Realm Resource Provider)

5. Optional HTTP SMS fallback when WhatsApp delivery fails

Supported UI/message languages: en, hi, es, fr, de, ar, pt.

Scope in v1.1

Version 1.1 is Meta-only.

Compatibility

• Keycloak: 26.x (Quarkus distribution)

• Java: 17+

• Maven: 3.9+

https://github.com/RemotiQ/wa2fa-meta