Possibility to enter your own secrets

[Mathias-Ro]

Feature Request

It would be nice if you could also enter or change the OTP secrets, e.g. when moving servers or to create accounts. Possibly an editable field with the automatically generated secret.

Summary

set / edit OTP secrets

[ruedigerkupper]

This is exactly what our institution needs, we already have 2FA for several services and all share the same secret. So users can authenticate everywhere with their company-TOTP. Please provide a way to set the secrets for users by the admin, like „occ twofactor:setsecret “.

[ernolf]

Anyone who needs this feature should switch to twofactor_oath:

https://github.com/ernolf/twofactor_oath

It is built for everything twofactor_totp cannot do: hardware OATH tokens, configurable algorithm and length, predetermined (custom) secrets, challenge-response, admin enrollment for whole groups, and mass provisioning. The simple cases stay simple, the advanced cases become possible.

h.t.h.

ernolf