Enrolling Custom TOTP Authenticators: A Step-by-Step Guide

Authenticator totp

To ensure robust identity verification, organizations often rely on multi-factor authentication methods. One such method is Time-Based One-Time Password (TOTP) authenticators, which provide an additional layer of security for users. In this article, we will guide you through the process of enrolling custom TOTP authenticators with ADSelfService Plus.

Before proceeding, it's essential to note that hardware tokens require a seed file consisting of secret keys provided by hardware vendors, while software tokens obtain their secret keys from ADSelfService Plus during enrollment.

### Choosing the Right Token

The first step in configuring custom TOTP authenticators is to choose between Software Tokens and Hardware Tokens. Software Tokens are mobile or desktop applications that generate time-based OTPs based on a secret key provided by ADSelfService Plus, while Hardware Tokens are physical devices that generate OTPs based on a secret key burned into the device.

### Configuring Custom TOTP Authenticators

To configure custom TOTP authenticators, follow these steps:

1. Log in to your ADSelfService Plus dashboard and navigate to Configuration > Self-Service > Multi-factor Authentication > Authenticators Setup.

2. Click on the 'Custom TOTP Authenticator' section.

3. Choose whether you want to use a Software Token or Hardware Token based on your requirements.

4. Enter the following details:

* Authenticator Name

* Passcode Length

* Passcode Expiration Time

* Passcode Hashing Algorithm

* Account Name Format

* Upload the Authenticator Logo (optional)

5. Click 'Custom TOTP Authenticator' to proceed.

### Selecting Self-Service Features

To create a policy for your custom TOTP authenticators, follow these steps:

1. Navigate to Configuration > Self-Service > Policy Configuration > Add New Policy.

2. Choose the OU or Group you want to apply the policy to from the 'Choose the Policy' dropdown menu.

3. Select at least one self-service feature based on your requirements.

### Configuring Hardware TOTP Tokens

For hardware tokens, admins can either enroll users through bulk enrollment or allow users to enroll themselves through self-enrollment. The seed file containing secret keys for the respective hardware devices will be provided by hardware vendors.

###

In conclusion, configuring custom TOTP authenticators with ADSelfService Plus provides an additional layer of security for your organization's identity verification process. By following these steps, you can ensure that your users are properly enrolled and authenticated using their chosen TOTP tokens.