Create a custom context-based access policy

Create a custom context-based access policy with a TOTP authentication obligation.

  1. In the local management interface, go to AAC > Access Control.
  2. Create a CBA policy named CBA_OTP_Demo.
  3. Add the following two policy rules:
    1. If authenticationMechanismTypes RegExp ".*totp"
    Then Permit
    2. Permit with Authentication TOTP One-time Password

Parent topic: Example combining CBA, Authentication Service Framework, and OAuth