On ke, 07 syys 2022, Kjell Cornelius Nicolaysen via FreeIPA-devel wrote:

Hey,

I'm trying to figure out how to set the default policy for OTP tokens as we've just got a new requirement.

Creating a TOTP token as an admin I can set the secure hash, time window and number of digits, but when adding a token as a regular user it defaults to SHA-1 with 6 digits and a 30 seconds window.

Would anyone be able to point to where I can change the defaults?

There is none.

We have a similar request from one of customers but haven't yet looked into implementing it.