We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda SSL VPN

How do I configure One-Time Password via SMS on my Barracuda SSL VPN?

  • Type: Knowledgebase
  • Date changed: 8 years ago

Solution #00004376

 

Scope:

This solution applies to all Barracuda SSL VPNs.

 

Answer:

One-Time passwords can be delivered via two methods, by Email or by SMS over Email. To configure One-Time Password (OTP) via SMS over Email delivery follow these instructions:

 

  1. Create the authentication scheme that makes use of OTP as a secondary module.
  2. Go to Access Control > Security Settings > One-Time Password. Ensure that Method of Delivery is set to SMS over Email. All other options can be configured to your own preferences.
  3. Now go to Access Control > Configuration > SMS. For the SMS Gateway Address, enter the SMS email gateway address to where the SSL VPN will need to send messages. For forwarding to user’s mobile devices, include the cellNumber attribute in the address. For example, ${userAttributes:cellNumber)@example.com. When a password needs to be sent, the attribute will be replaced with the user’s cell number.
  4. Ensure that the users that will use the OTP password to login have a cell phone number set in their Accounts.

 

Some SMS services require some additional configuration details to be passed through authentication details. These can be added to the Message Text and Expired Message at the start of the message. For example:

 

user:<username>
password:<password>
api_id:<API_ID>
to: ${userAttributes:cellNumber}
text:Your one time password is: ${otp:password}. This password expires on: ${otp:expiryDate}

 

This will pass through the authentication credentials to the SMS service, identify who the message should be sent to, and only send the text section.

 

Link to this page:

https://campus.barracuda.com/solution/50160000000Hs1EAAS