Skip to content

Authentication using a OTP

Target Audience: Developers

Introduction

When implementing authentication using Single Sign-On v2 (SSO2), you can leverage one time passwords instead of the ordinary password that the end-user has selected.

Requirements and limitations

Authentication

Authentication with a OTP can be accomplished using the authenticate operation. The OTP is to be submitted in the password claim. Otherwise the claims are the same as when authenticating using regular passwords.

OTP authentication is not available for accounts with login_disabled = true. Requesting an OTP for such an account will be rejected. See Login disabled for more information.