# Onelogin authentication does not support standard TOTP MFA

**URL:** <https://forum.pritunl.com/t/onelogin-authentication-does-not-support-standard-totp-mfa/629>\
**Category:** Pritunl VPN\
**Created:** [December 15, 2022, 1:24pm UTC](https://forum.pritunl.com/t/onelogin-authentication-does-not-support-standard-totp-mfa/629 "2022-12-15T13:24:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lumattr](https://forum.pritunl.com/user_avatar/forum.pritunl.com/lumattr/32/254_2.png) [@lumattr](https://forum.pritunl.com/u/lumattr)\
**Post date:** [December 15, 2022, 1:24pm UTC](https://forum.pritunl.com/t/onelogin-authentication-does-not-support-standard-totp-mfa/629/1 "2022-12-15T13:24:00Z")

</div>

Hi,

Im encountering an issue where i cant use the standard TOTP codes that i have setup on my Onelogin account becuase it appears as though the only supported MFA method for the Onelogin authentication is their Protect app via push notification.

It looks like the other Providers that have push options are still coded to support the TOTP codes like Okta and Duo but Onelogin is the only one that isnt.

Please could this be fixed?

The relevant code is here: [pritunl/pritunl/sso/onelogin.py at master · pritunl/pritunl · GitHub](https://github.com/pritunl/pritunl/blob/master/pritunl/sso/onelogin.py#L224)

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [December 16, 2022, 3:54am UTC](https://forum.pritunl.com/t/onelogin-authentication-does-not-support-standard-totp-mfa/629/2 "2022-12-16T03:54:52Z")

</div>

The _OneLogin Secondary Factor_ option in the top right settings can be set to _Passcode_. This should accept passcodes provided by OneLogin, it is only tested with the passcode provided by the OneLogin Protect app.

Do you have information on what the value of `auth_factor_name` is for your configuration? It can’t be changed to ignore the `auth_factor_name` because there are other non-relevant types that need to be ignored.

---

<div class="post-metadata">

**Author:** ![lumattr](https://forum.pritunl.com/user_avatar/forum.pritunl.com/lumattr/32/254_2.png) [@lumattr](https://forum.pritunl.com/u/lumattr)\
**Post date:** [December 19, 2022, 10:37am UTC](https://forum.pritunl.com/t/onelogin-authentication-does-not-support-standard-totp-mfa/629/3 "2022-12-19T10:37:36Z")

</div>

I dont know the value of `auth_factor_name` as i dont have that level of access. Im just looking for the app to acces TOTP codes from another authenticator like google authenticator. Im using 1password to handle my MFA but the auth factor name should be google if i understand their process.

The issue is that the line i posted ignores all other authenticators apart from the Onelogin protect app. I can enter a code from my other app, but the code is ignored and i get a `OneLogin secondary not available` error in my profile logs.