Set OTP defaults

[Kjell Cornelius Nicolaysen]

Hey,

I'm trying to figure out how to set the default policy for OTP tokens as 
we've just got a new requirement.

Creating a TOTP token as an admin I can set the secure hash, time window 
and number of digits, but when adding a token as a regular user it 
defaults to SHA-1 with 6 digits and a 30 seconds window.

Would anyone be able to point to where I can change the defaults?


Thank you in advance for any help.

-- 
Mvh,
Kjell C. Nicolaysen
Bitfrost AS

PGP Public key available on request.
Current key (at time of this email) fingerprint:
3F59 7410 AFD5 FC22 F2F1  EEC9 980A 8C9E C126 6716

[Alexander Bokovoy]

On ke, 07 syys 2022, Kjell Cornelius Nicolaysen via FreeIPA-devel wrote:
> Hey,
>
> I'm trying to figure out how to set the default policy for OTP tokens 
> as we've just got a new requirement.
>
> Creating a TOTP token as an admin I can set the secure hash, time 
> window and number of digits, but when adding a token as a regular user 
> it defaults to SHA-1 with 6 digits and a 30 seconds window.
>
> Would anyone be able to point to where I can change the defaults? 
There is none.

We have a similar request from one of customers but haven't yet looked
into implementing it.



-- 
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland