Hi,
when you've enabled 'Auto-create OTP tokens for users' and users forget to login using the password format the QRCode screen is presented again, and a new token is also created for the same user. This results in clutter. Why not skip the creation of a token once a token already exists for that user and present a message that the user has to logon using his password and OTP token instead of only a password?
Franc.
Guest User!
You are not Sophos Staff.
