Prioritize WebAuthn over TOTP

[jackson]

I’m trying to implement WebAuthn in my Keycloak instance and it’s mostly working. I’d like the login page to show the WebAuthn prompt before the TOTP prompt, however, while only requiring one. Alternatively, I would also be ok with a “select your authenticator” type prompt, like you see with Google.

Here’s what my flow looks like right now:

Thanks in advance!

[alerque]

Try something a bit simpler, the following works for me to do what you describe you want: