Configure TOTP for 2-Factor Authentication¶
This page guides you through configuring two-factor authentication for a web application using TOTP (Time-based One-Time Password) as the second factor.
For more information, see the TOTP specification.
- You need to set up the sample application.
Configure TOTP as the second factor¶
To configure TOTP as the second authentication factor:
On the management console, go to Main > Identity > Service Providers > List.
Click Edit on the
Expand the Local and Outbound Authentication Configuration section and click Advanced Configuration.
Click + Add Authentication Step twice to add two authentication steps.
Select the following authentication methods from the relevant dropdowns and click + Add Authenticator.
Authentication step Local Authenticator First step
Username & Password
Click Update to save the configurations.
You have successfully configured TOTP as the second factor of authentication.
Try it out¶
Access the following sample Pickup Dispatch application URL:
Click Login and enter admin's credentials.
Scan the QR code using an authenticator application (Example: Google Authenticator Mobile Application), and click Continue
The QR code will be displayed only at the first attempt. After you click Continue, the QR code will no longer be shown.
You will now be prompted to enter the TOTP code. The TOTP will be displayed on the authenticator application that you used to scan the QR.
Enter the TOTP and click Continue.
You will now be logged into the application successfully.
You can also add the following configurations to enhance your TOTP configurations.
Send emails with TOTP¶
Optionally, you can set up the users to receive the TOTP code via email during the authentication flow.
To allow sending TOTP in an email:
1. Initially, configure email sending module.
2. Add the following configuration to the
3. Save the configurations and restart the server.
AllowSendingVerificationCodeByEmail = true
The email template used to send this email notification is the TOTP template. You can edit and customize the email template. For more information on how to do this, see Customize Automated Emails.