Generate OTP token with next sign-in

Question

I have about 50 remote users on a19.5.2 MR2-Build624 firewall. The firewall was migrated over from a previous version that didn't have "Generate OTP token with next sign-in". If I enable this feature will it make all my users reenroll for a new OTP token? The info on this is not clear though it says they won't gain access until they scan the QR code. Does anyone know what will happen to my existing users if I turn this on now? Thanks.

This thread was automatically locked due to age.

Scott Santoro · Answer

[deleted]

Vivek Jagad · Answer

Hello Jae , Thank you for reaching out to the community, You can either select for specific users or groups or for All. 
 Generate OTP token with next sign-in 
 You can do one of the following:

On : Users must use an authenticator application for generating passcodes. 
 They must sign in to the user portal and scan the QR code using the authenticator app. The QR code only appears for the users and groups you've specified. See OTP token .

Off : Users must use the hardware token your organization has implemented. 
 Under Issued tokens , manually configure a token for each user.

Additionally, you may also refer a recommended read - Sophos Firewall: How to configure Multi-factor authentication and understanding the OTP timestep settings

Generate OTP token with next sign-in

Top Replies