Aleks/totp-mfa-recommendation #30615
Open
+4
−0
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Note: If your TOTP token works in Google Authenticator, it will likely work with Datadog. However, some MFA providers, such as Duo and Okta, generate QR codes that are restricted to their own apps (e.g., Duo Mobile, Okta Verify) and may not work with general TOTP tools like Google Authenticator or Datadog. This limitation is set by the provider. To ensure compatibility, use a QR code or TOTP secret that follows standard TOTP protocols.
Updated standard TOTP note for brevity
📝 Documentation Team Review RequiredThis pull request requires approval from the @DataDog/documentation team before it can be merged. Please ensure your changes follow our documentation guidelines and wait for a team member to review and approve your changes. |
Preview links (active after the
|
aliciascott
requested changes
Jul 22, 2025
| @@ -20,6 +20,10 @@ Multi-factor authentication methods such as TFA and MFA help protect your applic | |||
|
|
|||
| Datadog Synthetic MFA global variables allow you to test your application's TOTP-based MFA modules and critical user journeys without disabling critical security measures or manually entering authentication codes with disparate tools. You do not need to create or maintain dedicated environments to test MFA-enabled user journeys. | |||
|
|
|||
| **Note:** If your TOTP token works in Google Authenticator, it is likely compatible with Datadog. | |||
There was a problem hiding this comment.
Suggested change
| **Note:** If your TOTP token works in Google Authenticator, it is likely compatible with Datadog. | |
| **Note**: If your TOTP token works in Google Authenticator, it is likely compatible with Datadog. |
| @@ -20,6 +20,10 @@ Multi-factor authentication methods such as TFA and MFA help protect your applic | |||
|
|
|||
| Datadog Synthetic MFA global variables allow you to test your application's TOTP-based MFA modules and critical user journeys without disabling critical security measures or manually entering authentication codes with disparate tools. You do not need to create or maintain dedicated environments to test MFA-enabled user journeys. | |||
|
|
|||
| **Note:** If your TOTP token works in Google Authenticator, it is likely compatible with Datadog. | |||
| Some QR codes are restricted to specific verification methods and may not work elsewhere. To ensure compatibility, use a QR code or secret that follows standard TOTP protocols. | |||
There was a problem hiding this comment.
Suggested change
| Some QR codes are restricted to specific verification methods and may not work elsewhere. To ensure compatibility, use a QR code or secret that follows standard TOTP protocols. | |
| Some QR codes are limited to specific verification methods and may not work across platforms. To ensure compatibility, use a QR code or secret that follows standard TOTP protocols. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What does this PR do? What is the motivation?
Update for GV MFA token creation to address recurring questions around supportability of the various MFA providers used by customers.
Merge instructions
Merge readiness:
For Datadog employees:
Your branch name MUST follow the
<name>/<description>convention and include the forward slash (/). Without this format, your pull request will not pass CI, the GitLab pipeline will not run, and you won't get a branch preview. Getting a branch preview makes it easier for us to check any issues with your PR, such as broken links.If your branch doesn't follow this format, rename it or create a new branch and PR.
[6/5/2025] Merge queue has been disabled on the documentation repo. If you have write access to the repo, the PR has been reviewed by a Documentation team member, and all of the required checks have passed, you can use the Squash and Merge button to merge the PR. If you don't have write access, or you need help, reach out in the #documentation channel in Slack.
Additional notes