We’ve been using this project for a little over ten years as our first attempt to implement MFA across a number of systems. At the time (ten years ago!) there

We’ve been using this project for a little over ten years as our first attempt to implement MFA across a number of systems. At the time (ten years ago!) there was concern about trusting cloud providers, so we had pressure to implement it on-prem. Additionally the cloud offering at the time only validated the OTP, but all user to token tracking was left up to the individual system, so we ended up customizing it quite heavily to allow us to automate token provisioning and track user to token mappings, and provide a RADIUS front end so we could tie in other systems. We’re finally looking to retire it, but it’s had a good long life.