X Labs: Proof of Capability - Multi-Factor Authentication

In this lab, you'll build and validate an email-based Multi-Factor Authentication (MFA) flow using TomorrowX's Composable Agentic Platform (CAP) without modifying the Login App's code.

CAP connects and works with a wide range of MFA technologies, including Microsoft Authenticator, Google Authenticator, YubiKey, or any solution that supports a login trigger and MFA challenge.

Beyond MFA, the same pattern can be used to deploy entirely new login technologies such as passkeys, OAuth, or other modern authentication methods without touching the application.

• Your Lab Environment

4 Linux EC2 Instances (1 for Login App, 2 for TomorrowX Agents, 1 for CAP Console) 2 Application Load Balancers (ALBs) (1 for Login App, 1 for TomorrowX Agents in round-robin configuration) AWS Permissions for EC2, Security Groups, and Route 53 Route 53 Subdomain for DNS record management (switching between load balancers)

• How the Lab Works

The lab is broken down into exercises, each with a series of steps that include clear instructions and screenshots. Every exercise ends with a validation step either through the application's front end or by checking the state of backend data using CAP's observability capabilities.

Validate each exercise before moving on to the next. This ensures any rework is limited to the most recent exercise and gives you confidence that you're making steady progress.