A One-Time Password (OTP) is a simple way to ensure stronger security by utilizing multifactor authentication (MFA).
AppGate ZTNA has a built in Time Based OTP Provider. This allows your security team to put a policy in place requiring you to confirm your identity with an OTP before accessing certain resources. Before you can use this feature you will need to install and set up the OTP app on your phone or tablet.
If you see the message below, then the Time Based OTP Provider is being used.
You may receive this notification the first time you use AppGate ZTNA and/or later when you try to access an application that requires additional authentication. To complete the action, click on the notification and setup your OTP.
If you don’t want to set up the OTP app at the current time, close the window. You will be prompted again to install the app next time you try.
Configure OTP
A new window will provide instructions to install and configure an OTP authenticator app on your phone or tablet. There is no requirement to use a specific app; any app supporting the OAUTH time-based open standard should work.
Consider the following before configuring an OTP:
As the OTP is highly dependent on correct time, ensure that your smartphone or tablet is kept up to date. Keeping correct time is done automatically by most modern internet connected devices. If you have any doubts see your IT department for guidance.
If you lose your smartphone or tablet, note that you can setup two devices at the same time.
Guard your personal smartphone or tablet that generates your OTP as you would with any other device containing sensitive information
To configure an OTP:
Download an authenticator app to your mobile device.
Open the app and begin setup.
Most authenticator apps allow you to scan a QR code. Scan the QR code displayed. Some devices may require an app to scan QR codes; see your IT department or device vendor for guidance. If you plan to use two devices—such as a phone and a tablet—to generate the same identical OTP, be sure to scan the presented QR code on both devices.
If you can’t scan the QR code, you can manually enter the key.
When setup has completed, your phone or tablet will automatically generate the first OTP code for you to enter.
Enter OTP
When you have initialized the OTP app, a User interaction window will ask you to enter a one-time password.
To enter the OTP:
Open the app on your phone or tablet to see the OTP.
Type the latest code into the window.
Click Submit or Connect to continue.
For more help with this, see the Multifactor Authentication section.