6.3.1.5. Email

The token type email sends the OTP value in an email to the users. You can configure the email server in Email Token Configuration.

Enroll an email token

When enrolling an email token, you only need to specify the email address of the user, or let the token read the address from the user store at each authentication (WebUI: Read email dynamically from user source on each request, API parameter dynamic_email).

The email token is a challenge response token. I.e. when using the OTP PIN in the first authentication request, the sending of the email will be triggered and in a second authentication request the OTP value from the email needs to be presented. It implements the challenge authentication mode.

For a more detailed insight see the code documentation Email Token.