---
sourceDocument: Australia Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/integrate-applications

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Create an MFA authenticator

# Create an MFA authenticator in RPA Hub {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Define the authenticator and token length that acts as an enabler for the Time-based One-time Password (TOTP) authentication in RPA Hub so that the unattended robots can seamlessly authenticate against multi-factor authentication (MFA)-enabled applications.

## Before you begin

Familiarize yourself with multi-factor authentication (MFA) concepts. For more information, see [Multi-factor authentication](https://www.servicenow.com/docs/access?context=mfa-landing&version=australia&pubname=australia-platform-security&ft:locale=en-US).

Familiarize yourself with the TOTP authentication in RPA Hub. For more information, see [TOTP authentication in RPA Hub](https://www.servicenow.com/docs/LI5W6iATRgDpYcWRzp7vKA "You can configure the Time-based One-time Password (TOTP) fields in RPA Hub that enable the unattended robots to seamlessly authenticate against multi-factor authentication (MFA)-enabled applications.").

You must do this task in the classic environment.

Role required: sn_rpa_fdn.rpa_release_manager or sn_rpa_fdn.rpa_admin

## About this task

An authenticator application is a third-party software that generates temporary passcodes. Users can use these passcodes along with their password to log in to an instance that requires multi-factor authentication (MFA). For example, the following applications support Time-based One-time Passwords (TOTP):

* Google Authenticator
* Microsoft Authenticator
* Okta Verify

{#create-mfa-authenticator-rpa__ul_enl_j32_gcc}For more detail on these applications, see [Authenticator applications](https://www.servicenow.com/docs/access?context=mfa-auth-app&version=australia&pubname=australia-platform-security&ft:locale=en-US).

The MFA authenticator record acts as an input to the Time-based One-time Password
(TOTP) authenticator.

After you create an MFA authenticator record, all the fields are read-only.

You can't edit an MFA authenticator record. If changes are required to an existing
MFA record, you must retire an existing record and then create an MFA authenticator
record.

## Procedure

1. Navigate to AllRobotic Process AutomationAdministrationAuthenticators.
2. Select New.
3. On the form, fill in the fields.  
   {#create-mfa-authenticator-rpa__table_pyx_mhd_4qb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Unique name of the MFA authenticator. For example, Google Authenticator. |
   | Token Length | Length of the generated Time-based One-time Password (TOTP) that depends on the authenticator you have selected: * 6- The minimum length of the TOTP that is generated. * 7 * 8 * 9- The maximum length of the TOTP that is generated. {#create-mfa-authenticator-rpa__ul_e52_pqh_pvb} |
   | Life Cycle Stage Status | Status of the life-cycle stage of the MFA authenticator: * In Use- This value is the default. * Retired {#create-mfa-authenticator-rpa__ul_bsz_zqh_pvb} |
   [Table 1. MFA Authenticator form]

   {#create-mfa-authenticator-rpa__table_pyx_mhd_4qb}
4. Select Submit.
{#create-mfa-authenticator-rpa__steps_or3_2ph_pvb}

## What to do next

Create a TOTP authenticator. For more information, see [Create a TOTP authenticator in RPA Hub](https://www.servicenow.com/docs/FTfyLWmXY4aJ7jUYYKBt5g "Map a multi-factor authentication (MFA) authenticator record with a seed in a robot credential. This mapping results in creating a Time-based One-time Password (TOTP) authenticator record in RPA Hub.").
**Related tasks**   

* [Retire an MFA authenticator in RPA Hub](https://www.servicenow.com/docs/cghaX7DT5O8R_cBH7g8U1A "Retire a multi-factor authentication (MFA) authenticator in RPA Hub so that you can turn off the authentication. After you retire an MFA authenticator, it can’t be used again.")
* [Delete a TOTP authenticator in RPA Hub](https://www.servicenow.com/docs/KzI~is72n1As9YEOvFSlew "Delete a Time-based One-time Password (TOTP) authenticator record in RPA Hub so that you can dissociate it from a bot process.")

*[\>]: and then