Now, User1 opens the device where Google Authenticator app is installed, then either scans the QR image (or) manually adds a new user (for example: GA-User1) by entering the above given secret registration key. User saves 10 backup codes in a safe place for using it later during authentication when end-user device (where Google Authenticator app is installed) is not available (in emergency). User1 is given a TOTP registration key in text form/QR image form and 10 backup codes. When User1 for the first time, performs a login to the above configured user-realm:Īfter successful authentication with primary authentication-server, User1 is shown the TOTP registration page. The admin can associate an end-user to a realm that has a secondary authentication server configured as TOTP authentication server.įor first time registration via web, perform the following steps:įor example: Admin associates an end-user User1 to a user-realm that has the TOTP authentication-server configured as the secondary authentication-server.

Yubikey google authenticator