Hi,

We are planning to migrate 2fa configurations from our existing system to keycloak.

Lets take an use case of google authenticator. In this case, we do have access to authenticator secret in plain text and its base32 encoded string which is setup in google authenticator.

I wanted to understand the format that this secret is stored in credential table (is it plain text/encrypted/base32?) and process used to verify these totp tokens.