Create a TOTP authenticator in RPA Hub

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 2 minutes de lecture

    • Map a multi-factor authentication (MFA) authenticator record with a seed in a robot credential. This mapping results in creating a Time-based One-time Password (TOTP) authenticator record in RPA Hub.

    Avant de commencer

    Familiarize yourself with multi-factor authentication (MFA) concepts. For more information, see Multi-factor authentication.

    Familiarize yourself with the TOTP authentication in RPA Hub. For more information, see TOTP authentication in RPA Hub.

    Create an MFA authenticator record. For more information, see Create an MFA authenticator in RPA Hub.

    Create a robot credential. For more information, see Create a robot credential in RPA Hub.

    Do this task only when you select the Process Type field as Unattended on the Bot process configuration form while you're creating a bot process. For more information, see Configuring a bot process record in RPA Hub, Bot process configuration form in RPA Hub, and Bot Process form in RPA Hub.

    Verify that the life-cycle stage status of the associated bot process is set to either Build or In Maintenance.

    Role required: sn_rpa_fdn.rpa_developer, sn_rpa_fdn.rpa_release_manager or sn_rpa_fdn.rpa_admin

    Pourquoi et quand exécuter cette tâche

    A seed is a secret key of the authenticator that is used to generate the TOTP.

    An authenticator application is a third-party software that generates temporary passcodes. Users can use these passcodes with their password to log in to an instance that requires multi-factor authentication (MFA).

    With TOTP authentication, you can store the seed of the authenticator at the instance level so that your unattended robots can seamlessly authenticate against MFA-enabled applications.

    If a TOTP authenticator is using external credential vault, then ensure that the associated external credential vault is active.

    In RPA Hub, you can retrieve robot credentials, application credentials, or TOTP seed in two ways:
    • From ServiceNow credentials record (application credential, robot credential, or TOTP authenticator).
    • From an external credential vault. For more information, see External credential vault in RPA Hub.

    Procédure

    1. Navigate to All > Robotic Process Automation > RPA Hub Workspace.
    2. Select the list icon (List icon.).
    3. On the Lists tab, under Credential Management, select Robot Credentials.
    4. Select the robot credential record that you want to associate an MFA authenticator record to.
    5. On the TOTP Authenticators tab, select New.
    6. On the form, fill in the fields.
      Tableau 1. TOTP Authenticator form
      Field Description
      Authenticator MFA authenticator to be mapped to this robot credential.

      Alternatively, you can select the search icon and select the MFA authenticator.

      For example, Okta.
      Seed Secret key of the authenticator that is used to generate the TOTP.

      This field does not appear if the External Credential check box is selected.
      External Credential Select this check box to fetch the seed from external credential vaults.
      External Credential Vault Select an external credential vault record that is used for fetching the seed from an external credential vault.

      Use the search icon to select an external credential vault record. For example, DemoCyberArk.

      Only active external credential vault records are listed here.

      This field appears only when the External Credential check box is selected.
      Subflow Input Provide a JSON that acts as an input to the subflow mapped in the selected external credential record.

      This JSON is used by the Subflow REST Step and must contain the necessary information for retrieving seed from the external credential vault.

      The value must be in JSON format. You cannot enter an empty JSON value.

      For more information about the JSON, see Steps to configure an external credential vault in RPA Hub.

      This field appears only when the External Credential check box is selected.
    7. Select Save.
    8. Facultatif : In the Activity and Compose fields, view the activity of the form, work notes, and additional comments.

    Que faire ensuite

    Use the GetTOTP component in the RPA Desktop Design Studio to generate TOTP.