Implementing MFA Shipping SMS OTP: Keycloak vs. ClavionX A hands-on report from adding SMS as a second factor to a live identity provider: 17 Java classes and two silent bugs on Keycloak vs. a single toggle on ClavionX.