Skip to content

Configure TOTP for 2-Factor Authentication

This page guides you through configuring two-factor authentication for a web application using TOTP (Time-based One-Time Password) as the second factor.

Info

For more information, see the TOTP specification.

Prerequisites

Configure TOTP as the second factor

To configure TOTP as the second authentication factor:

  1. On the management console, go to Main > Identity > Service Providers > List.

  2. Click Edit on the saml2-web-app-pickup-dispatch.com service provider.

  3. Expand the Local and Outbound Authentication Configuration section and click Advanced Configuration.

  4. Click + Add Authentication Step twice to add two authentication steps.

  5. Select the following authentication methods from the relevant dropdowns and click + Add Authenticator.

    Authentication step Local Authenticator
    First step Username & Password
    Second step TOTP

  6. Click Update to save the configurations.

You have successfully configured TOTP as the second factor of authentication.

Try it out

  1. Access the following sample Pickup Dispatch application URL: http://localhost.com:8080/saml2-web-app-pickup-dispatch.com

  2. Click Login and enter admin's credentials.

  3. Scan the QR code using an authenticator application (Example: Google Authenticator Mobile Application), and click Continue

    Info

    The QR code will be displayed only at the first attempt. After you click Continue, the QR code will no longer be shown.

  4. You will now be prompted to enter the TOTP code. The TOTP will be displayed on the authenticator application that you used to scan the QR.

    TOTP code

  5. Enter the TOTP and click Continue.

You will now be logged into the application successfully.

Additional configurations

You can also add the following configurations to enhance your TOTP configurations.

Send emails with TOTP

Optionally, you can set up the users to receive the TOTP code via email during the authentication flow.

To allow sending TOTP in an email: 1. Initially, configure email sending module. 2. Add the following configuration to the deployment.toml file. 

[authentication.authenticator.totp.parameters]
AllowSendingVerificationCodeByEmail = true
3. Save the configurations and restart the server.

Tip

The email template used to send this email notification is the TOTP template. You can edit and customize the email template. For more information on how to do this, see Customize Automated Emails.

Related topics

Top