For certain workflows, we may want the user to re-authenticate themselves. What would be the best way to force the user to perform 2FA / MFA?

For a web-based app, is it possible for a user to sign-in under different accounts and freely switch between them?

We have an application where users can create workspaces, but the account tied to each workspace is unique to that workspace. We'd like for the user to be able to sign-in to as many workspaces as they'd like but also switch between the accounts easily.

If this is possible, how would one do it? We do this with Cognito, but it's a gigantic hack with lots of local storage manipulations.

For a web-based app, is it possible for a user to sign-in under different accounts and freely switch between them?

We have an application where users can create workspaces, but the account tied to each workspace is unique to that workspace. We'd like for the user to be able to sign-in to as many workspaces as they'd like but also switch between the accounts easily.

If this is possible, how would one do it? We do this with Cognito, but it's a gigantic hack with lots of local storage manipulations.

For certain workflows, we may want the user to re-authenticate themselves. What would be the best way to force the user to perform 2FA / MFA?

I was wondering if FusionAuth allows for the capture of the access / refresh token from a 3rd party OIDC provider such as Google. The use-case would be where we have users sign into our application, but we have 3rd party integrations that may require the token.

We'd like to spare the user from having to auth multiple times within our application to access these 3rd party integrations.