I'm adding a second factor to the authentication process using this: https://latch.elevenpaths.com/

So far, I've extended FormAuthenticator and added the 2FA overriding the method handleLoginPrompt. Now it works when user logged using forms based authentication but it does not have effect when user uses kerberos.

Is there any way of doing this for every login no matter what module the user uses? Do I have to extend every LoginModule?

Thanks in advance.