Enabling TOTP for Secret Server Users

Upon logging into Web Password Filler and Delinea Credential Manager (DCM), users will be prompted to enter a Time-based One-Time Password (TOTP) code if their login configuration requires it. Once authenticated, users can view the TOTP code within the secret details in the popup when accessing a secret configured with a TOTP code. Additionally, when autofilling credentials into a website using a secret with TOTP enabled, the system will automatically populate the TOTP field on the login page and ensure synchronization if the TOTP code changes prior to submission.

To enable TOTP: 

  1. From the Admin menu, select Users.

  2. Select the check box beside each user to enable two-factor authentication for.

  3. From the < Select Bulk Operation > drop-down menu, select Enable TOTP Auth Two Factor.

  4. Click OK in the dialog that appears, confirming the operation.

  5. The user(s) are now required to complete the soft token setup with a mobile device the next time they log into Secret Server. See Onboarding the Mobile App for details on the account and mobile app setup that follow.