LinOTP

This article has multiple issues. Please help or discuss these issues on the talk page. (Learn how and when to remove these template messages) The topic of this article may not meet Wikipedia's notability guidelines for products and services. Please help to demonstrate the notability of the topic by citing reliable secondary sources that are independent of the topic and provide significant coverage of it beyond a mere trivial mention. If notability cannot be shown, the article is likely to be merged, redirected, or deleted. Find sources:  –  ·  ·  · scholar · JSTOR (July 2019) (Learn how and when to remove this template message) This article needs additional citations for verification. Please help by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources:  –  ·  ·  · scholar · JSTOR (June 2013) (Learn how and when to remove this template message) This article relies too much on references to primary sources. Please improve this by adding secondary or tertiary sources. (March 2021) (Learn how and when to remove this template message) (Learn how and when to remove this template message)

LinOTP is Linux-based software to manage authentication devices for two-factor authentication with one time passwords. It is implemented as a web service based on the python framework Pylons. Thus it requires a web server to run in.

LinOTP is mainly developed by the German company KeyIdentity GmbH. Its core components are licensed under the Affero General Public License.

It is an open source authentication server certified^[2] by the OATH initiative for open authentication for its 2.4 version.

Overview[]

As a web service LinOTP provides a REST-like web API.^[3] All functions can be accessed via Pylons controllers. Responses are returned as a JSON object.

LinOTP is designed in a modular way enabling user store modules and token modules. Thus it is capable of supporting a wide range of different tokens.

Features[]

• Supported tokens:^[4]

• SafeNet eToken Pass
• SafeNet Safeword Alpine
• mOTP
• Lost token
• Paper token
• C-100 (HOTP)
• Feitian]] C-200 (TOTP)
• Feitian C-300 (OCRA)
• Feitian c601 (optical OCRA)
• Authenex A-Key V 3.6
• Yubico Yubikey
• Gemalto Ezio Token
• 106/103
• 306 (OCRA)
• BR Token SafeSIGNATURE
• Simple Pass token
• LSE Remote Token
• LSE Radius Token
• LSE Tagespasswort Token
• Apps for iPhone and Android like the Google Authenticator
• Any HOTP/ TOTP and OCRA Token

• Yubikey mass enrollment via CLI
• support for token databases like sqlite, mysql, postgresql, oracle, db2
• management via web interface or command line client
• Users stored in flat files
• PAM module
• SAML
• OpenID
• FreeRADIUS connection via rlm_perl
• Selfservice
• Import of XML Token files
• Management functions:

• enroll/assign tokens
• synchronize, resynchronize, automatic resychronization
• activate/deactivate/delete tokens
• autoassignment
• lost token scenario
• find token by OTP value
• get OTP value

• Detailed Policies Definitions
• Sophisticated Audit API
• Multitenancy

Source Code[]

Being written in Python the program itself comes as the source code.

See also[]

References[]