Skip to main content
Solved

Bot handling of website MFA requirements

  • October 21, 2025
  • 4 replies
  • 57 views

Forum|alt.badge.img+5

More and more of our website vendors are locking down their sites with MFA requirements. We have a framework for dealing with MFA emails sending a code and we respond with that code. However, we do not have a mechanism when it comes to Authenticator app requirements such as Google Authenticator. 

Has anyone else successfully dealt with this problem? How did you go about doing it? Is it even possible?

My guidance and insight that you may have is appreciated. 
 

 

Best answer by Padmakumar

Hi ​@donvnielsen,

 

There are 3rd-party applications that can be integrated to handle MFA at present.
However, setting an app-based passcode exclusively for the automation platform will be the ideal approach to handle the MFA.

4 replies

LoganPrice
Most Valuable Pathfinder
Forum|alt.badge.img+14
  • Most Valuable Pathfinder
  • 80 replies
  • October 21, 2025

Automation platforms should respond to this problem with additional features which integrate with authentication software. I assume its much easier said than done, but I believe MFA will only become more restrictive as time goes on, which will hamper existing and future automations unless anything changes.

I apologize that I do not have a suggestion for you on this.


Forum|alt.badge.img+8
  • Navigator | Tier 3
  • 77 replies
  • October 22, 2025

Most probably TOTP which can be easily automated.

I doubt if this is a push based MFA that you need to manually approve, then you have no easy option.


Padmakumar
Premier Pathfinder | Tier 7
Forum|alt.badge.img+15
  • Premier Pathfinder | Tier 7
  • 1171 replies
  • Answer
  • October 22, 2025

Hi ​@donvnielsen,

 

There are 3rd-party applications that can be integrated to handle MFA at present.
However, setting an app-based passcode exclusively for the automation platform will be the ideal approach to handle the MFA.


Forum|alt.badge.img+5
  • Author
  • Navigator | Tier 3
  • 18 replies
  • October 27, 2025

I have found typescript code that can do the Google Authenticator calculation. I translated that to python and have created a pure bot-to-bot solution. No screen scraping. As soon as the web page is loaded and requests a number, we can calculate it and provide it. 

All that needs to be done is extracting the secret key at setup time and storing that in the credential vault.

-dvn