Configure TOTP for 2-Factor Authentication¶

This page guides you through configuring two-factor authentication for a web application using TOTP (Time-based One-Time Password) as the second factor.

Prerequisites¶

• You need to set up the sample application.

Configure TOTP as the second factor¶

To configure TOTP as the second authentication factor:

1. On the management console, go to Main > Identity > Service Providers > List.

2. Click Edit on the saml2-web-app-pickup-dispatch.com service provider.

3. Expand the Local and Outbound Authentication Configuration section and click Advanced Configuration.

4. Click + Add Authentication Step twice to add two authentication steps.

5. Select the following authentication methods from the relevant dropdowns and click + Add Authenticator.

   Authentication step	Local Authenticator
   First step	Username & Password
   Second step	TOTP

6. Click Update to save the configurations.

You have successfully configured TOTP as the second factor of authentication.

Try it out¶

1. Access the following sample Pickup Dispatch application URL: http://localhost.com:8080/saml2-web-app-pickup-dispatch.com

2. Click Login and enter admin's credentials.

3. Scan the QR code using an authenticator application (Example: Google Authenticator Mobile Application), and click Continue

   Info

   The QR code will be displayed only at the first attempt. After you click Continue, the QR code will no longer be shown.

4. You will now be prompted to enter the TOTP code. The TOTP will be displayed on the authenticator application that you used to scan the QR.

   

5. Enter the TOTP and click Continue.

You will now be logged into the application successfully.

Additional configurations¶

You can also add the following configurations to enhance your TOTP configurations.

Send emails with TOTP¶

Optionally, you can set up the users to receive the TOTP code via email during the authentication flow.

To allow sending TOTP in an email:

1. Initially, configure email sending module.
2. Add the following configuration to the deployment.toml file.

   [authentication.authenticator.totp.parameters]
   AllowSendingVerificationCodeByEmail = true

3. Save the configurations and restart the server.