Create a TOTP authenticator in RPA Hub

Map a multi-factor authentication (MFA) authenticator record with a seed in a robot credential. This mapping results in creating a Time-based One-time Password (TOTP) authenticator record in RPA Hub.

始める前に

Familiarize yourself with multi-factor authentication (MFA) concepts. For more information, see Multi-factor authentication.

Familiarize yourself with the TOTP authentication in RPA Hub. For more information, see TOTP authentication in RPA Hub.

Create an MFA authenticator record. For more information, see Create an MFA authenticator in RPA Hub.

Create a robot credential. For more information, see Create a robot credential in RPA Hub.

Do this task only when you select the Process Type field as Unattended on the Bot process configuration form while you're creating a bot process. For more information, see Configuring a bot process record in RPA Hub, Bot process configuration form in RPA Hub, and Bot Process form in RPA Hub.

Verify that the life-cycle stage status of the associated bot process is set to either Build or In Maintenance.

Role required: sn_rpa_fdn.rpa_developer, sn_rpa_fdn.rpa_release_manager or sn_rpa_fdn.rpa_admin

このタスクについて

A seed is a secret key of the authenticator that is used to generate the TOTP.

An authenticator application is a third-party software that generates temporary passcodes. Users can use these passcodes with their password to log in to an instance that requires multi-factor authentication (MFA).

With TOTP authentication, you can store the seed of the authenticator at the instance level so that your unattended robots can seamlessly authenticate against MFA-enabled applications.

If a TOTP authenticator is using external credential vault, then ensure that the associated external credential vault is active.

In RPA Hub, you can retrieve robot credentials, application credentials, or TOTP seed in two ways:

• From ServiceNow credentials record (application credential, robot credential, or TOTP authenticator).
• From an external credential vault. For more information, see External credential vault in RPA Hub.

手順

1. Navigate to All > Robotic Process Automation > RPA Hub Workspace.
2. Select the list icon ().
3. On the Lists tab, under Credential Management, select Robot Credentials.
4. Select the robot credential record that you want to associate an MFA authenticator record to.
5. On the TOTP Authenticators tab, select New.
6. On the form, fill in the fields.

   表 : 1. TOTP Authenticator form

   Field	Description
   Authenticator	MFA authenticator to be mapped to this robot credential. Alternatively, you can select the search icon and select the MFA authenticator. For example, Okta.
   Seed	Secret key of the authenticator that is used to generate the TOTP. This field does not appear if the External Credential check box is selected.
   External Credential	Select this check box to fetch the seed from external credential vaults.
   External Credential Vault	Select an external credential vault record that is used for fetching the seed from an external credential vault. Use the search icon to select an external credential vault record. For example, DemoCyberArk. Only active external credential vault records are listed here. This field appears only when the External Credential check box is selected.
   Subflow Input	Provide a JSON that acts as an input to the subflow mapped in the selected external credential record. This JSON is used by the Subflow REST Step and must contain the necessary information for retrieving seed from the external credential vault. The value must be in JSON format. You cannot enter an empty JSON value. For more information about the JSON, see Steps to configure an external credential vault in RPA Hub. This field appears only when the External Credential check box is selected.

7. Select Save.
8. オプション: In the Activity and Compose fields, view the activity of the form, work notes, and additional comments.

次のタスク

Use the GetTOTP component in the RPA Desktop Design Studio to generate TOTP.

関連タスク

• Delete a TOTP authenticator in RPA Hub
• Retire an MFA authenticator in RPA Hub