Definition
The OATH registration widget is used to provision the shared secret key between an OTP generator (such as Google Authenticator) and the verification server (AM server).
It is a standalone widget that requires a host feature of type "self" or an object feature where the object is the current subject.
Typically used in a UI_FOR_OBJECT feature of type "self".
The user is presented with a screen that invites him to proceed to a "One Time Password" registration. He can click the store links to obtain the recommended application (Google Authenticator, MS authenticator etc.).
Upon pressing on continue, a QR code is presented to the user, encoding the shared secret. The user must use his application (like Google Authenticator) to scan the QR code.
After registering the QR code, the user needs to provide a valid TOTP code in the field at the bottom using his application. If the code is correct the user will be informed that the registration is complete.
Configuration
Widget
Properties
The widget has no mandatory properties.
Example
<widget id="oath-registration-widget" xsi:type="ctdbum:OATHRegistrationWidgetType">
<hidden>false</hidden>
<config>
<bordered>false</bordered>
<title>true</title>
<displayWizardSteps>false</displayWizardSteps>
<displayWizardProgressBar>true</displayWizardProgressBar>
</config>
</widget>
Feature Example
Read Next
-
Search Widgets Allows to perform search on objects and to create a result table.
-
List Widget Allows to display a list of results (external or internal data).
-
Roles Widgets Allows to manage all functionalities about roles (assignment, request, dashboard, dimensions...).
-
Password Widgets Allows to manage password for Identities (generate a password according to several criteria, reset password).
-
Button Widgets Allows to display button in order to redirect the user to another feature.
-
MFA Widgets Allows to enroll and manage MFA devices.
-
Webauthn Widgets Allows to enroll and manage Webauthn devices.
-
Separator Widget Allows to separate several widgets on a feature.
-
OATH Registration widget -
OTP Widgets Allows to enroll and manage OTP addresses
-
Workflow History Widget Allows to display pending workflows history launched from a Feature
-
Reporting Widgets -
User Devices Widget Used to allow users or admin to list, rename or delete devices.
-
App Dashboard Widget -
Audit Report Widget Allows to display audit events on object types.
-
Schedule Report Widget Allows to display pending operations on object types.
-
Proxy Widget Allows to reference a widget from another Feature and make it act as if it was communicating with this original Feature.
-
Self-Driven Dashboard Widget Allows to display dashboard items configured from other widgets
-
Technical Dashboard Widget