Forum Discussion

ankudutta_26125's avatar
ankudutta_26125
Icon for Nimbostratus rankNimbostratus
Jul 26, 2018

Freeze OTP for Authentication for some specific MSISDN Number

I am searching for some functionality to freeze the PIN (OTP) for specific MSISDN (Mobile Numbers) to login on our web portal, So that this enables our web testers to hardcode that PIN (OTP) in their test script whenever the login is requested for that specific MSISDN numbers, for them to be able to automate the testing (avoiding dependency on feeding the OTP manually).

 

APM
application delivery
security

1 Reply

Sort By
  • Martijn_van_de1's avatar
    Martijn_van_de1
    Icon for Cirrus rankCirrus
    Aug 03, 2018

    Hi,

     

    One Time Password (OTP) is there for a security reason. By freezing OTP, your security is just the same as a password. From the OTP vendors I know I never saw the option for a fixed OTP code.

     

    But I understand your need for web testers to have a fixed code. Can't you create some kind of check before authenticating. For example clients from some trusted sources do not need OTP, but can use a password? The APM policy is very flexible with that kind of configurations.

     

    Regards, Martijn.