Generating time-based one-time passwords in Privileged Session Manager WebApp Connectors

Hi, very good blog :) I have a question as I am trying to replicate what you have done but for aws.amazon.com. I added an account from aws that has TOTP authentication to the cyberark platform I downloaded the CC Amazon Web Services (AWS) Console for IAM Users and in WebFromFields I had: account>{AWSAccountID}(searchby=id) username>{Username}(searchby=id) password>{password}(searchby=id) signin_button>(Button) search-box-input>(Validation)(searchby=id) mfacode>(Validation)(searchby=id)

What should WebFromFields look like in this case? Because I tried what you did, i.e. example 3, but unfortunately I was not able to log in using the TOTP code. Maybe something else I should do besides modifying the WebFromFields ?

great informative

Hello Tim , great post! What was the PAM version that you run this with ? I tried on 12.6 without any success.

I edited a part about not rotating the TOTP secret after a thoughtful discussion. Thanks Nathaniel Maier!