A PAM module connecting to Keycloak for user authentication using OpenID Connect protocol, MFA (Multi-Factor Authentication) or precisely, TOTP (Time-based One-time Password), is supported.