System and method for multi-factor authentication

A method for authenticating a user, comprising:

• receiving an authentication request from a user, the authentication request including authentication credentials and an authentication code;
• comparing the received authentication credentials to stored user authentication credentials to determine whether there is a match;
• transmitting a request message to a callback system associated with the user in response to the determining, the request message including the authentication code;
• receiving a reply message from the callback system in response to the request message, the reply message being one of a SUCCESS message or a FAILURE message;
• and
• authorizing or denying access to the user based on the received reply message.

A method for providing authentication support to a remote authentication server, the method comprising:

• detecting an authentication action by a user;
• generating a first authentication code associated with the user;
• store the first authentication code and a corresponding expiration time in a memory;
• receiving a code request from the remote authentication server, the code request including a second authentication code;
• comparing the received second authentication code to the first authentication code;
• and
• transmitting a reply message to the remote authentication server that indicates a SUCCESS or FAILURE of the code request based on the comparing.