Hi, Ham Di. That's a bit too general question to answer specifically.You should check [our docs on authentication options](https://gluu.org/docs/ce/3.1.6/authn-guide/intro/) and try to find something that suites you. Supergluu will probably be the easiest one to add, but Duo or U2F are also good options. Enabling any of these comes down to configuring and enabling corresponding custom script. Then you either make it default method for oxAuth on "Manage authentication" page, or make it default method for the specific OIDC client in its settings. Don't change default auth method for oxTrust until you're confident in your settings - you can lock yourself out of your Gluu Server admin web UI. If you'll have specific questions on configuring any of those, please open another ticket.