--- title: OTP Email Sender node description: "Configure the OTP Email Sender node to send a one-time passcode to a user's email address as part of an authentication journey." component: platform version: 7.5 page_id: platform:auth-node-ref:otp-email-sender canonical_url: https://docs.pingidentity.com/platform/7.5/auth-node-ref/otp-email-sender.html llms_txt: https://docs.pingidentity.com/platform/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md keywords: ["Nodes & Trees", "Journeys", "Authentication", "Email"] page_aliases: ["auth-node-otp-email-sender.adoc"] section_ids: availability: Availability prerequisites: Prerequisites inputs: Inputs configuration: Configuration outputs: Outputs errors: Errors outcomes: Outcomes example: Example --- # OTP Email Sender node The OTP Email Sender node sends an email containing a generated one-time password (OTP) to the user. Send mail requests time out after 10 seconds. | | | | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | You can change the timeout in the following advanced AM server properties:* `org.forgerock.openam.smtp.system.connect.timeout` * `org.forgerock.openam.smtp.system.socket.read.timeout` * `org.forgerock.openam.smtp.system.socket.write.timeout`> **Collapse: How do I configure advanced server properties?** > > * To configure advanced server properties for all the instances of the AM environment, go to Configure > Server Defaults > Advanced in the AM admin UI. > > * To configure advanced server properties for a specific instance, go to Deployment > Servers > *Server Name* > Advanced. > > If the property you want to add or edit is already configured, click the pencil ([icon: pencil-alt, set=fa]) button to edit it, then click the checkmark ([icon: check, set=fa]) button. > > Save your changes.For more information, refer to [advanced properties](https://docs.pingidentity.com/pingam/7.5/reference/deployment-configuration-reference.html#smtp-connect-timeout). | ## Availability | Product | Available? | | ------------------------------------- | ---------- | | PingOne Advanced Identity Cloud | Yes | | PingAM (self-managed) | Yes | | Ping Identity Platform (self-managed) | Yes | ## Prerequisites * The node requires a configured email provider. ## Inputs This node requires the following input from the shared state: * The authenticating user's ID. The node queries the user's entry for an email address. Implement an [Attribute Collector node](attribute-collector.html) node before this node to obtain the user's ID. * The OTP stored in the `oneTimePassword` transient state property. Implement the [HOTP Generator node](hotp-generator.html) before this node in the journey to obtain the OTP. ## Configuration | Property | Usage | | ----------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Mail Server Host Name *(required)* | The hostname of the SMTP email server. | | Mail Server Host Port | The outgoing mail server port.Common ports are 25, 465 for SSL/TLS, or 587 for StartTLS. | | Mail Server Authentication Username | The username Ping Identity Platform uses to connect to the mail server. | | Mail Server Authentication Password | The password Ping Identity Platform uses to connect to the mail server. This property is deprecated. Use the Mail Server Secret Label Identifier instead. If you set a Mail Server Secret Label Identifier, this password is ignored. | | Mail Server Secret Label Identifier | An identifier used to create a *secret label* for mapping to a secret in a secret store.Ping Identity Platform uses this identifier to create a specific secret label for this node. The secret label takes the form `am.authentication.nodes.otp.mail.identifier.password` where identifier is the value of Mail Server Secret Label Identifier. The identifier can only contain alphanumeric characters `a-z`, `A-Z`, `0-9`, and periods (`.`). It can't start or end with a period.If you set a Mail Server Secret Label Identifier and Ping Identity Platform finds a matching secret in a secret store, the Mail Server Authentication Password is ignored. | | Email From Address *(required)* | The email address from which the OTP will appear to have been sent. | | Email Attribute Name | The attribute in the user profile that contains the email address to which the email with the OTP is sent.Default: `mail` | | The subject of the email | Click Add to add a new email subject. Enter the locale, such as `en-uk`, in the Key field and the subject in the Value field. Repeat these steps for each locale that you support. | | The content of the email | Click Add to add the content of the email. Enter the locale, such as `en-uk`, in the Key field and the email content in the Value field. Repeat these steps for each locale that you support. | | Mail Server Secure Connection | Set the connection method to the mail server.If you set a secure method here, Ping Identity Platform must trust the server certificate of the mail server.The possible values for this property are:- `NON SSL/TLS` - `SSL/TLS` - `Start TLS`Default: `SSL/TLS` | | Gateway Implementation Class | The class the node uses to send SMS and email messages. A custom class must implement the `com.sun.identity.authentication.modules.hotp.SMSGateway` interface.Default: `com.sun.identity.authentication.modules.hotp.DefaultSMSGatewayImpl` | ## Outputs This node copies shared and transient state into the outgoing node state. ## Errors The node throws an `IdRepoException` and an `SSOException` error if it's unable to obtain the user's email address. ## Outcomes Single outcome path. Implement an [OTP Collector Decision node](otp-collector-decision.html) after this node to continue the authentication journey. ## Example ![journey otp email sender](_images/journey-otp-email-sender.png)