OTP auto POST in VIP Authentication Hub
search cancel

OTP auto POST in VIP Authentication Hub

book

Article ID: 397641

calendar_today

Updated On:

Products

VIP Authentication Hub

Issue/Introduction

Running VIP Authentication Hub, is there a way to configure the OTP (One Time Password), to be generated automatically and POSTed to the VIP Authentication Hub form automatically, without the intervention of the user?

Resolution

For security reason, and by design, the OTP should come from another channel.

That contradicts the essence of MFA and OTP. MFA is to validate the identity of the user with something that the user "has", like email, SMS phone, biometric print, etc.

As such, automating the entire OTP process introduces a flaw in the security that OTP is expected to bring.