====== multiOTP ======

Librairie en Php sous licence GNU LGPL qui implémente beaucoup de protocoles [[/glossaire/otp|One Time Password (OTP)]] et qui est certifiée par le consortium [[/glossaire/oath|Open AuTHentication (OATH)]] pour ses implémentation [[/glossaire/hotp|HOTP]] et [[/glossaire/totp|TOTP]]. Dernière version observée 5.9.6.5 du 2023-07-07.

  * https://github.com/multiOTP/multiotp
  * https://github.com/multiOTP/multiotp/wiki

The multiOTP class can be used alone (for example to have strong authentication for your PHP based web application), as a command line tool (to handle users and have strong authentication using command line), as a web service (to provide centralized authentication for a client/server installation) or finally coupled with a radius server like TekRADIUS or FreeRADIUS to be able to have a strong two factor authentication through the RADIUS protocol for external devices like for example firewalls or captive portals.

The multiOTP class supports currently the following algorithms and RFC's:
  * RFC [[rfc>1994]] CHAP (Challenge Handshake Authentication Protocol)
  * RFC [[rfc>2433]] MS-CHAP (Microsoft PPP CHAP Extensions)
  * RFC [[rfc>2487]] SMTP Service Extension for Secure SMTP over TLS
  * RFC [[rfc>2759]] MS-CHAPv2 (Microsoft PPP CHAP Extensions, Version 2)
  * RFC [[rfc>2821]] SMTP (Simple Mail Transfer Protocol)
  * RFC [[rfc>4226]] OATH/HOTP ([[/glossaire/hotp|HOTP]]: An HMAC-Based One-Time Password Algorithm)
  * RFC [[rfc>5424]] Syslog Protocol (client)
  * RFC [[rfc>6030]] PSKC (Additional Portable Symmetric Key Container Algorithm Profiles)
  * RFC [[rfc>6238]] OATH/TOTP ([[/glossaire/totp|TOTP]]: Time-Based One-Time Password Algorithm)
  * Yubico OTP (http://yubico.com/yubikey)
  * mOTP (http://motp.sourceforge.net)
  * OATH/HOTP or OATH/TOTP, base32/hex/raw seed, QRcode provisioning (FreeOTP, Google Authenticator, ...)
  * SMS tokens (using Afilnet, aspsms, Clickatell, eCall, IntelliSMS, Nexmo, NowSMS, SMSEagle, Swisscom LA REST, Telnyx, any custom provider, your own script)
  * TAN (emergency scratch passwords)