Two-factor without the friction

TOTP & HOTP in one place

• Time-based and event-based one-time passwords (TOTP/HOTP) managed centrally in COD, instead of scattered across individual apps.
• One consistent interface for strong two-factor authentication across all tenants.
• Role-based and multi-tenant, everyone sees and controls exactly what they are responsible for.

Copy instead of creating from scratch

Select an existing OTP entry, copy it, adjust the fields, save, done. This creates a new entry with a randomly generated secret based on a proven configuration. It saves time and avoids typos in recurring setups.

Self-service: users help themselves

• Users restore their OTP independently via their own settings.
• They enable OTP themselves, provided their role permits it.
• This noticeably relieves first-level support and shortens waiting times.

Reset at the click of a button, without touching the database

• Lost device or locked-out access? In the user view, a manager or admin only needs to click “Reset OTP”.
• Manual database resets by the development team are a thing of the past.
• Back up and running faster, without the detour through risky database interventions.

Active Directory, roles & codPass

• Active Directory users, too, manage their OTP directly in their own settings, role-based and multi-tenant.
• Tightly interlocked with codPass, the open-source secrets management. Note: codPass is standalone-ready today, and the native COD integration is in preparation.
• Deployable on-premises and KRITIS-ready, with full control of your data in your hands.