Change OTP tokens from SHA-1 to SHA-256

Hi Vhince

One important Information for you:

If the users use the Sophos Authenticator, there will be no problem with the new SHA256 Tokens.

But be careful with other authenticators.

Even very popular authenticators like the Microsoft Authenticator, which many users use for Azure/ Intune/ Office 365 MFA, are NOT capable to manage SHA256 Tokens!

See:

https://social.technet.microsoft.com/Forums/en-US/862fa575-468a-452c-b3cb-821bb054394e/does-the-microsoft-authenticator-app-support-the-digits-algorithm-and-period-fields?forum=MicrosoftAuthenticatorApp

https://github.com/neos-sdi/adfsmfa/issues/7

Greets from Hamburg, Germany

EDIT: This is the most interesting link - but it didn't work.

https://labanskoller.se/blog/2019/07/11/many-common-mobile-authenticator-apps-accept-qr-codes-for-modes-they-dont-support/

Thank you for the information. Make sense whether to decide to use the higher hash algorithm. Microsoft Authenticator is common in our place as a single all-around authenticator app.

Regards

Thank you for the information. Make sense whether to decide to use the higher hash algorithm. Microsoft Authenticator is common in our place as a single all-around authenticator app.

Regards