Two Factor Authentication with Sophos UTM

Question

HI 
 
 I have setup one-time password (OTP) service on webadmin, why cant i disable user portal... 
 I dont use it 
 I will only use webadmin with token security 
 Can i Disable User Portal and still use webadmin with token security ? 
 /Anders

Emile Belcourt · Accepted Answer

Yes, if you go to Definitions & Users > Authentication Services > One-Time Password there is a section with checkboxes for what the OTP Authentication will be used for, you can deselect the User Portal like shown below:

Evianne · Answer

If you want to have auto-created OTP tokens, you have to enable the User Portal. The auto-creation of the OTP token is triggered when the user logs into User Portal. 
If you deselect 'Auto-create OTP tokens for users', you don't need the User Portal. 
 
If you need the auto-creation feature, you could still limit the access to the User Portal for one host or choose an internal listen IP address.

Evianne · Answer

If you deselect 'Auto-create OTP tokens for users', you have to specify a secret per user manually.