# Pritunl client doesn't prompt for OTP with Google Authenticator

**URL:** <https://forum.pritunl.com/t/pritunl-client-doesnt-prompt-for-otp-with-google-authenticator/2954>\
**Category:** Pritunl VPN\
**Tags:** pritunl\
**Created:** [January 9, 2025, 9:25am UTC](https://forum.pritunl.com/t/pritunl-client-doesnt-prompt-for-otp-with-google-authenticator/2954 "2025-01-09T09:25:18Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![beparmentier](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/c77e96/32.png) [@beparmentier](https://forum.pritunl.com/u/beparmentier)\
**Post date:** [January 9, 2025, 9:25am UTC](https://forum.pritunl.com/t/pritunl-client-doesnt-prompt-for-otp-with-google-authenticator/2954/1 "2025-01-09T09:25:18Z")

</div>

Hello,

I try using Google Authenticator for MFA but when I activate it in server configuration the pritun-client doesn’t even prompt for OTP (when I get the profile from pritunl web I get the QR Code).

Only google sso is required

 ![image](https://forum-static.pritunl.com/original/2X/f/fe8b6a7d109b476383cfffad289fb567c1036bff.png)

```auto
[winter-meadow-7307][2025-01-09 10:09:31,541][INFO] Authenticating user
  user_name = "beparmentier@norauto.com"
  factors = ["google", "otp"]
[winter-meadow-7307][2025-01-09 10:09:31,553][INFO] Client authentication cached, skipping sso token
  user_name = "beparmentier@norauto.com"
  org_name = "Norauto"
  server_name = "sysops"
[winter-meadow-7307][2025-01-09 10:09:31,553][INFO] Client authentication cached, skipping password
  user_name = "beparmentier@norauto.com"
  org_name = "Norauto"
  server_name = "sysops"

```

Any idea what’s going on ?

Thanks

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [January 10, 2025, 7:57am UTC](https://forum.pritunl.com/t/pritunl-client-doesnt-prompt-for-otp-with-google-authenticator/2954/2 "2025-01-10T07:57:47Z")

</div>

[**Connection single sign-on**](https://docs.pritunl.com/docs/connection-authentication) takes priority over the Google Authenticator and user PIN. The Google Authenticator QR code is already available when completing single sign-on authentication from the web console so this wouldn’t add additional security. Either additional factors should be added with the single sign-on provider or [**device authentication**](https://docs.pritunl.com/docs/device-authentication) on the Pritunl server for additional security when using connection single sign-on.

---

<div class="post-metadata">

**Author:** ![beparmentier](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/c77e96/32.png) [@beparmentier](https://forum.pritunl.com/u/beparmentier)\
**Post date:** [January 15, 2025, 3:42pm UTC](https://forum.pritunl.com/t/pritunl-client-doesnt-prompt-for-otp-with-google-authenticator/2954/3 "2025-01-15T15:42:23Z")

</div>

Oh ok, I was misunderstanding the two options.  
Thanks you.