---
title: "Discussion on \"Generating time-based one-time passwords in Privileged Session Manager WebApp Connectors\" | Hashnode"
description: "Discussion on \"Generating time-based one-time passwords in Privileged Session Manager WebApp Connectors\". Generate TOTPs in PSM Webapp connectors, utilizing TOTP secrets stored as Logon Accounts"
url: "https://hashnode.com/posts/generating-time-based-one-time-passwords-in-privileged-session-manager-webapp-connectors/6484dfd9581f6f7cc372b46c"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Generating time-based one-time passwords in Privileged Session Manager WebApp Connectors](https://timschindler.blog/generating-time-based-one-time-passwords-in-privileged-session-manager-webapp-connectors?utm_source=hashnode&utm_medium=feed)

Generate TOTPs in PSM Webapp connectors, utilizing TOTP secrets stored as Logon Accounts

Jun 10, 2023 · 3 min read · timschindler.blog  
Updated Jun 16  
Read the article

-   [#cyberark](https://hashnode.com/tag/cyberark)
-   [#mfa](https://hashnode.com/tag/mfa)
-   [#privileged-session-manager](https://hashnode.com/tag/privileged-session-manager)
-   [#cybersecurity-1](https://hashnode.com/tag/cybersecurity-1)
-   [#idira](https://hashnode.com/tag/idira)

## Written by

[Tim Schindler](https://hashnode.com/@timschindler)

@timschindler · Amsterdam, NL

  
[View profile](https://hashnode.com/@timschindler)

Idira (CyberArk) MVP, Guardian | Principal Consultant at CyberIAM

Originally from the USA, working in Amsterdam, Netherlands in the digital identity space.

## Responses 3

Markdown supported · ⌘↵ to post

[Will Soon](https://hashnode.com/@wa88)

[Oct 13, 2023](https://hashnode.com/posts/generating-time-based-one-time-passwords-in-privileged-session-manager-webapp-connectors/6484dfd9581f6f7cc372b46c/comment/65295f26069d0e037f9a767f)

Hi, very good blog :) I have a question as I am trying to replicate what you have done but for aws.amazon.com. I added an account from aws that has TOTP authentication to the cyberark platform I downloaded the CC Amazon Web Services (AWS) Console for IAM Users and in WebFromFields I had: account>{AWSAccountID}(searchby=id) username>{Username}(searchby=id) password>{password}(searchby=id) signin\_button>(Button) search-box-input>(Validation)(searchby=id) mfacode>(Validation)(searchby=id)

What should WebFromFields look like in this case? Because I tried what you did, i.e. example 3, but unfortunately I was not able to log in using the TOTP code. Maybe something else I should do besides modifying the WebFromFields ?

[srinadh kalluri](https://hashnode.com/@srinadh7devops)

[Jun 30, 2023](https://hashnode.com/posts/generating-time-based-one-time-passwords-in-privileged-session-manager-webapp-connectors/6484dfd9581f6f7cc372b46c/comment/649ed9d15b8c3caad1788dde)

great informative

[Iki](https://hashnode.com/@iki675)

[Jun 12, 2023](https://hashnode.com/posts/generating-time-based-one-time-passwords-in-privileged-session-manager-webapp-connectors/6484dfd9581f6f7cc372b46c/comment/648726a3684c0f88d63c800e)

Hello Tim , great post! What was the PAM version that you run this with ? I tried on 12.6 without any success.

[Tim Schindler](https://hashnode.com/@timschindler)

[Jun 12, 2023](https://hashnode.com/posts/generating-time-based-one-time-passwords-in-privileged-session-manager-webapp-connectors/6484dfd9581f6f7cc372b46c/comment/648726a3684c0f88d63c800e#reply-648737d7684c0f88d63c819b)

Version 13.0 with the PSM running the latest Secure Web Application Connectors Framework available from the Marketplace (13.1): [cyberark-customers.force.com/mplace/s](https://cyberark-customers.force.com/mplace/s/#a3550000000EiCMAA0-a3950000000jjUwAAI)

[Iki](https://hashnode.com/@iki675)

[Jun 13, 2023](https://hashnode.com/posts/generating-time-based-one-time-passwords-in-privileged-session-manager-webapp-connectors/6484dfd9581f6f7cc372b46c/comment/648726a3684c0f88d63c800e#reply-64880fceb0717e8905e25f56)

[Tim Schindler](https://hashnode.com/@timschindler) great thank you Tim!

[Tim Schindler](https://hashnode.com/@timschindler)

[Jun 12, 2023](https://hashnode.com/posts/generating-time-based-one-time-passwords-in-privileged-session-manager-webapp-connectors/6484dfd9581f6f7cc372b46c/comment/6486becdc10282823cdecab2)

I edited a part about not rotating the TOTP secret after a thoughtful discussion. Thanks [Nathaniel Maier](https://hashnode.com/@NathanielMaier)!