Skip to content
OTOBO Community Guide

OneTimeAuthentificationLink

OneTimeAuthentificationLink

Section titled “OneTimeAuthentificationLink”

Compatibility OTOBO ≥ 11.0.x, Znuny ≥ 7.0.x

Overview

Section titled “Overview”

With the OneTimeAuthentificationLink plugin, OTOBO automatically generates single-use access tokens for customers. New users are created if necessary and receive a link via email to log in directly to their ticket portal without a password. Tokens expire after use or after a configurable period.

System Requirements

Section titled “System Requirements”
  • Framework: OTOBO 11.0.x
  • Packages: –
  • Third-Party: –

Installation

Section titled “Installation”
  1. Via Package Manager
  • Log in as an admin and open System Administration → Package Manager.
  • Search for “OneTimeAuthentificationLink” and click Install.
  1. Manual Installation
  • Unpack the plugin archive into Kernel/Config/Files/.
  • In the admin area, go to System Administration → Update → Reload File System.

Configuration (SysConfig)

Section titled “Configuration (SysConfig)”

Core::Auth::Customer

Section titled “Core::Auth::Customer”
KeyDescription
OneTimeAuth::CustomerErrorMessageNewLinkError message when a new link has been sent
OneTimeAuth::CustomerErrorMessageRefreshFailedMessage when a new token could not be generated
OneTimeAuth::TokenRefreshNotificationIDNotification text element for link refresh
OneTimeAuth::AccessDaysAfterCloseNumber of days links remain valid after a ticket is closed
OneTimeAuth::CustomerErrorMessageLinkExpiredError message when using an expired token
OneTimeAuth::CustomerErrorMessageWrongLinkMessage when using an old token if a new one already exists

Core::Email::PostMaster

Section titled “Core::Email::PostMaster”
  • PostMaster::PreFilterModule###000-CreateCustomerUser Automatically creates a CustomerUser upon receipt of new emails and protects against header spoofing via X-OTOBO-Customer.

Daemon::SchedulerCronTaskManager::Task

Section titled “Daemon::SchedulerCronTaskManager::Task”
  • Daemon::SchedulerCronTaskManager::Task###DeleteExpiredOTATokens Deletes expired One-Time-Authentification-Tokens of closed tickets.

Usage

Section titled “Usage”
  1. Send an email to the support address configured in OTOBO.
  2. If no customer with this address has been created yet, the plugin automatically creates a CustomerUser.
  3. Customers receive an email with a single-use valid link.
  4. Clicking the link opens the ticket portal without further login.
  5. Links expire after the first use or after the number of days defined in AccessDaysAfterClose.

Limitations

Section titled “Limitations”
  • Tokens can only be used once and cannot be extended manually.
  • Expiration of links must be ensured via CronTasks.
  • In case of incorrect mail configuration, the automation may fail.

Support & Further Information

Section titled “Support & Further Information”