HCL Domino TOTP & Passkey authentication

In a customer environment I have enabled the great working TOTP authentication. After migration the environment to Domino V14 I also enabled the Passkey authentication in the same Internet Site document.

Afterwards neither TOTP authentication nor Passkey Authentication worked. A clarification of the HCL Support delivered the following information:

You cannot enable both authentication types for the same internet site document !!

To accomplish this issue you have to:
– create different DNS records
( For example : 192.168.1.1 passkey.mytest.com totp.mytest.com ) nd point them to the same IP address
– create 2 website documents
( one for passkey.company.com and one for totp.company.com )
– create different login forms in the domcfg.nsf and point them to the correct login pages
( $$LoginUserFormMFA for TOTP, $$LoginUserFormPasskey for Passkey )

With those settings you can offer both authentication types on a single Domino Server.

Leave a comment