6.3.1.18. SMS Token

The token type sms sends the OTP value via an SMS service. You can configure the SMS service in SMS Token Configuration.

Enroll an SMS token

When enrolling an SMS token, you only need to specify the mobile phone number, or let the token read the number from the user store at each authentication (WebUI: Read number dynamically from user source on each request, API parameter dynamic_phone).

SMS token is a challenge response token. I.e. when sending the OTP PIN in the first authentication request, the sending of the SMS will be triggered and in a second authentication request the OTP value from the SMS needs to be presented. It implements the challenge authentication mode.

For a more detailed insight see the code documentation SMS Token.