Can I Send an OTP to a Mobile Phone?

Overview:

Some customers may wonder if it's possible to send an email message with an OTP (one-time password) from an Aventail appliance to a user's mobile phone. This article presents a solution that uses Active Directory. With some modification, these instructions could also work for an LDAP authentication server.

Procedure:

By default, in Active Directory, a user's E-mail value in his or her account properties page corresponds with the mail attribute within the directory. The procedure below outlines how to use the otherMailbox attribute to set a user's mobile phone email address.

1. Launch ADSI Edit on the Domain Controller (ADSI Edit is included on the Windows Server Support Tools folder of the Windows Server product CD).
2. Expand the domain schema and browse to the user's container.
3. Right-click on the user's container and choose Properties.
4. In the Attributes list, scroll to otherMailbox.
5. Highlight otherMailbox and click Edit.
6. In the Value to add field, enter the email address and click Add.
7. Click Add twice to save this setting.
8. On the Aventail appliance's authentication server settings page, under Advanced, you can use either mail or otherMailbox for the primary or secondary email address attribute.

If you do not know what email addresses to use in your directory, you can find a helpful reference list of email address examples here.