# Authentication

How users prove who they are — the flow engine and the factors it can require.

- [Flow editor](flows.md) — design the sign-in journey
- [Password policy & lockout](password-policy.md)
- [MFA overview](mfa.md)
- [TOTP & OTP factors](otp.md) · [Passkeys (WebAuthn)](passkeys.md) · [Device push & mobile app](device-push.md)
- [Risk-based / adaptive](risk-based.md)