| Table of Contents | ||
|---|---|---|
|
The current version of this plugin does support IdP V4.3, but will produce some warnings regarding the deprecated HttpServletRequest bean. If and when a cleaned up version of the plugin is available, we will adjust the compatibility rules to note that the new version is required for that IdP version. The warnings do not affect functionality and the plugin will be updated for IdP V5.0 regardless when the time comes.
Overview
The TOTP plugin provides a login flow that implements a bare-bones form of support for TOTP OATH tokens. Any software or hardware token supporting the TOTP algorithm should work. It can be used to piggyback on the existing Password flow's login form view, with an additional field to collect the token code, or it can be run separately with a dedicated view, usually via the IdP's Multi-Factor Authentication feature. In either case, the identity of the subject used to resolve token seeds is generally based on an earlier authentication step.
...