Fetch Token For MFA Step

Brief description

This step is used to retrieve the MFA token for authorization using TOTP algorithm (examples of use).

Step Information

Step Name (Not required)– the custom name of the process step that labels the editor’s process step box

Input Parameters

• Provider (Required): Select token provider
• Secret key (Required): The second password generated in the authenticator application

Output Parameters

• Token (Required): New or existing string variable that contains token
• Token timeout (Required): New or existing integer variable that stores the duration of token validity in seconds

Additional comments

Time-based one-time password (TOTP) is a computer algorithm that generates a one-time password (OTP) using the current time as a source of uniqueness. The token is valid for 30 seconds and then automatically refreshed. The timing depends on when you initiate the process, so you may retrieve the token at the end of its validation period. It is recommended to check the output variable "Token timeout" to see how many seconds are left for validation.

Get Secret Key

Log in to your account and set up a new authentication method through the application. You will receive a secret key, typically in the form of a QR code, which you need to scan with an authenticator app on your mobile phone. This secret key is used to generate time-based one-time passwords (TOTP), which change periodically but are always derived from the same key. Make sure to save the secret key securely, as it allows you to regenerate the same tokens if you need to set up the authenticator on a new device. The secret key does not change unless you reset your MFA setup or change your user credentials