OATH Tokens let you manage a catalog of hardware OATH-TOTP tokens (identified by their serial number) that can be assigned for use as an MFA factor in OneLogin. Use this API to list the tokens registered on your account, bulk-import a batch of tokens supplied by a hardware token vendor, look up a single token, and remove a token from the catalog.
This API manages the token catalog only — it does not assign a token to a user, and it does not perform OTP verification. The token’s
seedvalue is never returned by the API; every response masks it as*****.
Have a Question?
Found a problem or a bug? Submit a support ticket.
Looking for walkthroughs or how-to guides? Check out our Knowledge Base.
Have a product idea or request? Share it in our Ideas Portal.