> For the complete documentation index, see [llms.txt](https://ztrust.gitbook.io/ztrust-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ztrust.gitbook.io/ztrust-documentation/user-manual-ztrust-v4.1/4.-admin-manual/4.13-set-up-multi-factor-authentication/4.13.4-otp-based-login.md).

# 4.13.4 OTP Based Login

*"A One-Time Password (OTP) is a unique, temporary code that a user receives via SMS/email to authenticate a login or transaction. Unlike traditional static passwords, which remain the same until changed, an OTP is valid for a single session or transaction."*

Follow the below steps to set up the OTP Based Registration

1. Click on **Authentication** in the sidebar.<br>

   <figure><img src="/files/ti00Mx2HpSqH35QkfK1k" alt=""><figcaption><p>Fig. 4.12.4.a: Navingating to Authentication section</p></figcaption></figure>

2. Click on the **kebab menu (three dots)** on the right side of the **browser flow**. Select **Duplicate**. A popup will appear.<br>

   <figure><img src="/files/C2S9M0j2dp6EBFDDqJqa" alt=""><figcaption><p>Fig 4.12.4.b: Duplicating the existing browser flow</p></figcaption></figure>

3. Provide a **Name** for the flow, "OTP Based Login Flow" and click **Duplicate**. You will be redirected to the new flow configuration.<br>

   <figure><img src="/files/QbhNtdJdAIFkqT8FFalc" alt=""><figcaption><p>Fig 4.12.4.c: Giving a name to the new browser flow for OTP login</p></figcaption></figure>

4. Delete everything under **OTP Based Login Flow forms**.<br>

   <figure><img src="/files/jz5EPgnheFZQfWqOAuYe" alt=""><figcaption><p>Fig 4.12.4.d: Duplicated browser flow configuration page for OTP login</p></figcaption></figure>

5. Click on the **plus** icon on the right side of the **OTP Based Login Flow forms** and  select **Add Execution**. A popup will appear to select an execution.<br>

   <figure><img src="/files/kMmv6E5VJDmzKsX3vuHE" alt=""><figcaption><p>Fig 4.12.4.e: Proceeding to add a new execution to OTP login flow</p></figcaption></figure>

6. Search for **Email OTP**, select it and click **Add**.<br>

   <figure><img src="/files/8NRXIQ8kRSYKF6uTrYlR" alt=""><figcaption><p>Fig 4.12.4.f: Select 'Email OTP' execution to add</p></figcaption></figure>

7. Click on the **settings menu (gear icon)** on the right side of the **Email OTP**. A popup will appear to configure the OTP.<br>

   <figure><img src="/files/OHcoJ3cGVxT4MRRWy0rv" alt=""><figcaption><p>Fig 4.12.4.g: Proceeding to configure OTP login</p></figcaption></figure>

8. Provide an **Alias**, set the **OTP type**, **Number of digits in OTP**, **OTP Code period(in seconds)** and **Max Resend OTP Attempts**, then click **Save**.<br>

   <figure><img src="/files/2NM3b1HboXNmGJ3e0NBI" alt=""><figcaption><p>Fig 4.12.4.h: Configuring OTP login</p></figcaption></figure>

9. Click on the **Actions**, on the top right of the page, and then **Bind flow**. A popup will appear.<br>

   <figure><img src="/files/N9QYMAdAJWthTNBvfcrs" alt=""><figcaption><p>Fig 4.12.4.i: Changing the 'Requirement' of OTP login</p></figcaption></figure>

10. Select the **Browser flow** and click **Save**.<br>

    <figure><img src="/files/XWlV4tLruf0RtxmcNI3c" alt=""><figcaption><p>Fig 4.12.4.j: Selecting a flow to bind OTP login to</p></figcaption></figure>

OTP Based Login Flow will now be enabled.
