Dynamic length OTP generation
Is there any way to generate the OTP in PEGA using 4 digits? currently OOTB engine API code generates 8 digit code.
com.pega.pegarules.pub.context.IOTPGenerationInfo generatedOTP = tools.getAuthorizationHandle().getOTPManager().generate(context,longLivedToken,tools);
Pegasystems Inc.
AU
Hi @GOPIREDDY
After some digging in the 8.5 rulebase I don't see where the number of digits can be changed. Pega is likely prescribing that an 8-digit level of security is needed.
However I have discovered that you can invoke a third-party OTP service if the Pega capability doesn't meet your needs. Extension points appear to be:
- Data Transform: Embed-OTPInputs.pyOTPLoginParams ... set .pyUseExternal to true
- Activity: Work-.pySendOTPExternal ... to call the external OTP generation and delivery service
- Activity: Work-.pyValidateOTPExternal ... to call the external OTP validation service
Rules perhaps need to go in Rulesets available to your "Unauthenticated" access group as the OTP behavior is likely needed before the user is authenticated.
I suggest also reviewing the Configuring two-factor authentication with a one-time password series on Pega Community.
Updated: 17 Feb 2021 9:34 EST
CXMagic
GB
You might want to try this:
1. Create a Dynamic setting: OTPDigits=X //Example: 6
2. In pxSendOTP java step "Generate OTP using internal API"
com.pega.pegarules.pub.context.IOTPGenerationInfo generatedOTP = tools.getAuthorizationHandle().getOTPManager().generate(context,longLivedToken,tools);
int OTPLength = X (get this from Dynamic setting) //Example: 6
int digitsToRemove = 8 - OTPLength ; // Example: 8-6=2
referenceKey=generatedOTP.getReferenceId();
String OTPvalue = generatedOTP.getOTP(); //Example:12345678
referenceKey = referenceKey + substring(OTPValue, OTPLength, digitsToRemove); //ReferenceID78
OTPValue = substring(OTPValue,0, OTPLength); //Example: 123456
myStepPage.getProperty(".pyOTP").setValue(OTPvalue);
tools.putParamValue("ReferenceId",referenceKey); tools.findPage(inputPage).putString("pyReferenceID",referenceKey);
3. in pxVerifyOTP
String inputPage = tools.getParamValue("OTPInputs"); String referenceKey = tools.findPage(inputPage).getString("pyReferenceID"); //referenceID78 String OTP = tools.findPage(inputPage).getString("pyOTPValue"); //ExampleL: 123456
int OTPLength = X (get this from Dynamic setting) //Example: 6
You might want to try this:
1. Create a Dynamic setting: OTPDigits=X //Example: 6
2. In pxSendOTP java step "Generate OTP using internal API"
com.pega.pegarules.pub.context.IOTPGenerationInfo generatedOTP = tools.getAuthorizationHandle().getOTPManager().generate(context,longLivedToken,tools);
int OTPLength = X (get this from Dynamic setting) //Example: 6
int digitsToRemove = 8 - OTPLength ; // Example: 8-6=2
referenceKey=generatedOTP.getReferenceId();
String OTPvalue = generatedOTP.getOTP(); //Example:12345678
referenceKey = referenceKey + substring(OTPValue, OTPLength, digitsToRemove); //ReferenceID78
OTPValue = substring(OTPValue,0, OTPLength); //Example: 123456
myStepPage.getProperty(".pyOTP").setValue(OTPvalue);
tools.putParamValue("ReferenceId",referenceKey); tools.findPage(inputPage).putString("pyReferenceID",referenceKey);
3. in pxVerifyOTP
String inputPage = tools.getParamValue("OTPInputs"); String referenceKey = tools.findPage(inputPage).getString("pyReferenceID"); //referenceID78 String OTP = tools.findPage(inputPage).getString("pyOTPValue"); //ExampleL: 123456
int OTPLength = X (get this from Dynamic setting) //Example: 6
int digitsToRemove = 8 - OTPLength ; // Example: 8-6=2
int refKeyLength = @string.length(referenceKey);
String dummyDigits= substring(referenceKey, refKeyLength - digitsToRemove); //Example: 78
referenceKey = substring(referenceKey,0, refKeyLength - digitsToRemove); //ReferenceID
OTP= OTP + dummyDigits; //Example: 12345678
com.pega.pegarules.pub.context.IOTPValidationInfo response = tools.getAuthorizationHandle().getOTPManager().validate(referenceKey,OTP,tools);
-------------------------------------------------------------------------------------------------------------------------
All you are doing is removing the unwanted digits and storing them temporarily in referencekey and duting validation you are just putting them back.
Let us know if that works ?