Are hardware TOTP devices supported out of the box with the ISVA on prem solution. If so, what is the procedure to register these devices if you cannot scan a QR code or enter the key on the device itself

------------------------------
Gerwin Bastiaansen
------------------------------

If the TOTP seed needs to originate from "outside ISVA" and be populated "into ISVA" for a user account, then you build your own trivial registration experience (either for the user, but more likely for admins) via InfoMap, and leverage the IDMappingExtUtils.storeTotpSecretKey(user, key) API to populate it into the ISVA registry.

You can even build it in such a way that it can be accessed via apiauthsvc with a JSON payload, and support scripted or bulk registration payloads.

------------------------------
Shane Weeden
IBM
------------------------------

Thanks Shane, that confirms my thoughts

------------------------------
Gerwin Bastiaansen
------------------------------

Original Message:
Sent: Tue November 08, 2022 01:55 AM
From: Shane Weeden
Subject: Support for hardware TOTP devices

If the TOTP seed needs to originate from "outside ISVA" and be populated "into ISVA" for a user account, then you build your own trivial registration experience (either for the user, but more likely for admins) via InfoMap, and leverage the IDMappingExtUtils.storeTotpSecretKey(user, key) API to populate it into the ISVA registry.

You can even build it in such a way that it can be accessed via apiauthsvc with a JSON payload, and support scripted or bulk registration payloads.

------------------------------
Shane Weeden
IBM
------------------------------