Pritunl client doesn't prompt for OTP with Google Authenticator

Pritunl Pritunl VPN
1

Hello,

I try using Google Authenticator for MFA but when I activate it in server configuration the pritun-client doesn’t even prompt for OTP (when I get the profile from pritunl web I get the QR Code).

Only google sso is required

image
image419×550 28.3 KB

[winter-meadow-7307][2025-01-09 10:09:31,541][INFO] Authenticating user
  user_name = "beparmentier@norauto.com"
  factors   = ["google", "otp"]
[winter-meadow-7307][2025-01-09 10:09:31,553][INFO] Client authentication cached, skipping sso token
  user_name   = "beparmentier@norauto.com"
  org_name    = "Norauto"
  server_name = "sysops"
[winter-meadow-7307][2025-01-09 10:09:31,553][INFO] Client authentication cached, skipping password
  user_name   = "beparmentier@norauto.com"
  org_name    = "Norauto"
  server_name = "sysops"

Any idea what’s going on ?

Thanks

2

Connection single sign-on takes priority over the Google Authenticator and user PIN. The Google Authenticator QR code is already available when completing single sign-on authentication from the web console so this wouldn’t add additional security. Either additional factors should be added with the single sign-on provider or device authentication on the Pritunl server for additional security when using connection single sign-on.

3

Oh ok, I was misunderstanding the two options.
Thanks you.