Generate TOTP

This is a pre-built action located under the @Generic element type. The action generates a Time-Based One-Time Password (TOTP) for applications protected by Multi-Factor Authentication (MFA). The TOTP is generated according to the RFC 6238 standard.

Notes:

• Supported MFA type: Supports only OATH/TOTP with Base32 secret - based MFA, including Microsoft Authenticator when configured for TOTP.
• Unsupported MFA type: Does not support SMS OTP, FIDO2/WebAuthn, push-based MFA, number-matching MFA or Microsoft Authenticator activation Code + URL.
• To generate a TOTP, obtain the Base32 TOTP secret key from your MFA or authenticator configuration and encrypt it using the Advanced Encryption Standard method (AES) .

Syntax

Input Value: <Encrypted Secure Key>

Argument	Description
<Encrypted Secure Key> (Required)	Specify the secret key used to generate the TOTP.

Output Value: <Dynamic Variable>(Optional);<Dynamic Variable>(Optional)

Argument	Description
<Dynamic Variable> (Optional)	Stores the generated time-based one-time password.
<Dynamic Variable> (Optional)	Stores the action execution status as True or False.

Example: Generating a TOTP for Application Login (MFA)

In this example, we show how to generate a TOTP using an encrypted secret key and use it to complete login for an application with MFA enabled.

• Action: Generate TOTP
• Input Value: <Encrypted Secret Key>

  • The value Encrypted Secret Key specifies the encrypted TOTP secret key, generated beforehand using the Advanced Encryption Standard method (AES).
• Output Value: {GetOTP}

  • The {GetOTP} first output variable stores the generated time-based one-time password.
• Logical Explanation: The Generate TOTP action fetches the encrypted secret key from the Input Value column. This action generates time-based one-time password and stores it in the output variable {GetOTP}.