--- title: OTP Email Sender node description: The OTP Email Sender node sends an email containing a generated one-time passcode (OTP) to the user. component: auth-node-ref version: latest page_id: auth-node-ref::otp-email-sender canonical_url: https://docs.pingidentity.com/auth-node-ref/latest/otp-email-sender.html keywords: ["Nodes & Trees", "Journeys", "Authentication", "Email"] page_aliases: ["auth-node-otp-email-sender.adoc"] superseded_by: https://docs.pingidentity.com/auth-node-ref/latest/otp-email-sender.html section_ids: example: Example availability: Availability inputs: Inputs dependencies: Dependencies configuration: Configuration outputs: Outputs callbacks: Callbacks outcomes: Outcomes errors: Errors --- # OTP Email Sender node The OTP Email Sender node sends an email containing a generated one-time passcode (OTP) to the user. Send mail requests time out after 10 seconds. ## Example The following example demonstrates using an OTP in a multi-factor authentication journey: ![OTP journey](_images/otp-example-journey.png) * The [Page node](page.html) containing the [Platform Username node](platform-username.html) and [Platform Password node](platform-password.html) prompts for credentials. * The [Data Store Decision node](data-store-decision.html) validates the username-password credentials. * The [HOTP Generator node](hotp-generator.html) generates an eight-digit OTP. * The [Choice Collector node](choice-collector.html) prompts the user to choose whether they want to receive the OTP via email or SMS. * If the user chooses email, the [OTP Email Sender node](otp-email-sender.html) sends the OTP to the user's email address. * If the user chooses SMS, the [OTP SMS Sender node](otp-sms-sender.html) sends the OTP to the user's mobile number. * The [OTP Collector Decision node](otp-collector-decision.html) prompts the user to enter the OTP they received and verifies it. If the OTP is correct, the user is authenticated. ## Availability | Product | Available? | | ------------------------------------- | ---------- | | PingOne Advanced Identity Cloud | Yes | | PingAM (self-managed) | Yes | | Ping Identity Platform (self-managed) | Yes | ## Inputs * This node requires the `realm` and `username` properties in the incoming node state. Implement a [Platform Username node](platform-username.html) earlier in the journey. * This node requires the `oneTimePassword` property in the incoming node state. Implement the [HOTP Generator node](hotp-generator.html) earlier in the journey. ## Dependencies The node requires a configured email provider. Additionally, the user's profile must contain a valid email address. ## Configuration | Property | Usage | | ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Mail Server Host Name *(required)* | The hostname of the SMTP email server. | | Mail Server Host Port | The outgoing mail server port.Common ports are 25, 465 for SSL/TLS, or 587 for StartTLS. | | Mail Server Authentication Username | The username Advanced Identity Cloud uses to connect to the mail server. | | Mail Server Authentication Password | The password Advanced Identity Cloud uses to connect to the mail server. This property is deprecated. Use the Mail Server Secret Label Identifier instead. If you set a Mail Server Secret Label Identifier, this password is ignored. | | Mail Server Secret Label Identifier | An identifier used to create a *secret label* for mapping to a secret in a secret store.Advanced Identity Cloud uses this identifier to create a specific secret label for this node. The secret label takes the form `am.authentication.nodes.otp.mail.identifier.password` where identifier is the value of Mail Server Secret Label Identifier. The identifier can only contain alphanumeric characters `a-z`, `A-Z`, `0-9`, and periods (`.`). It can't start or end with a period.If you set a Mail Server Secret Label Identifier and Advanced Identity Cloud finds a matching secret in a secret store, the Mail Server Authentication Password is ignored. | | Email From Address *(required)* | The email address from which the OTP will appear to have been sent. | | Email Attribute Name | The attribute in the user profile that contains the email address to which the email with the OTP is sent.Default: `mail` | | The subject of the email | Click Add to add a new email subject. Enter the locale, such as `en-uk`, in the Key field and the subject in the Value field. Repeat these steps for each locale that you support. | | The content of the email | Click Add to add the content of the email. Enter the locale, such as `en-uk`, in the Key field and the email content in the Value field. Repeat these steps for each locale that you support. | | Mail Server Secure Connection | Set the connection method to the mail server.If you set a secure method here, Advanced Identity Cloud must trust the server certificate of the mail server.The possible values for this property are:- `NON SSL/TLS` - `SSL/TLS` - `Start TLS`Default: `SSL/TLS` | | Gateway Implementation Class | The class the node uses to send SMS and email messages.Default: `com.sun.identity.authentication.modules.hotp.DefaultSMSGatewayImpl` | ## Outputs This node copies shared and transient state into the outgoing node state. ## Callbacks This node doesn't send any callbacks. ## Outcomes Single outcome path. Implement an [OTP Collector Decision node](otp-collector-decision.html) after this node to continue the authentication journey. ## Errors The node throws an `IdRepoException` and an `SSOException` error if it's unable to obtain the user's email address.