Challenge Message

I’d like to customize the message during a challenge response, is there a way to do this?

For example, I have a policy with ‘challenge_response’ set to ‘totp’ and ‘otppin’ set to ‘userstore’. The user is prompted for their UserID and their password (ldap). They are then prompted for their otp, with the following message, ‘please enter otp’. I’d like to modify this message. I’ve located where this is set in but am fully aware that modifying this now will just be overwritten on upgrade. Is there someway to modify this currently with a policy? If not can I request this as a feature?

Many thanks!

Every tokenclass can overwrite the method create_challenge and probably will.
So your question depends on the token type! E.g. look at the SMS token ( or the Email token (

No, this currently can not be configured.

1 Like

Has anything changed here since the question was originally asked and answered?
Is it possible to customize the token Access-Challenge prompt especially for TOTP token type?

Policy, scope=authentiocation, action=challenge_text