FAQ: Can the SMS/Voice/PUSH OTP Length Be Increased for New Experience Realms?

Version Affected: 24.4.5 and earlier
 
 

Overview

On SecureAuth Identity Platform 24.4.5 and earlier, New Experience realms can only send SMS, Voice, and PUSH one-time passcodes (OTPs) up to 6 digits long, even though Classic realms support up to 8 digits.

Cause

This is a limitation specific to New Experience realms. Classic realms already support OTP lengths up to 8 digits for SMS and Voice, but the New Experience implementation caps SMS, Voice, and PUSH OTPs at 6 digits.

Resolution:

This was improved in 24.4.6 and later, which raises the maximum OTP length for SMS, Voice, and PUSH to 10 digits. Upgrade to 24.4.6 or later, then set the desired length using the Passcode length option in the New Experience realm's MFA settings.

The screenshot above shows the Passcode length dropdown in the New Experience UI, with options from 4 through 10 digits and 10 selected.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.