--- title: Create an MFA authenticator in RPA Hub description: Define the authenticator and token length that acts as an enabler for the Time-based One-time Password \(TOTP\) authentication in RPA Hub so that the unattended robots can seamlessly authenticate against multi-factor authentication \(MFA\)-enabled applications. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/integrate-applications/create-mfa-authenticator-rpa.html release: australia topic_type: task last_updated: "2026-03-12" reading_time_minutes: 2 keywords: [authenticate unattended robot rpa hub, authenticate bot rpa hub, unattended robot authentication rpa hub, bot authentication rpa hub] breadcrumb: [Credential Management, Use, RPA Hub, Robotic Process Automation \(RPA\) Hub, Workflow Data Fabric] --- # Create an MFA authenticator in RPA Hub Define the authenticator and token length that acts as an enabler for the Time-based One-time Password \(TOTP\) authentication in RPA Hub so that the unattended robots can seamlessly authenticate against multi-factor authentication \(MFA\)-enabled applications. ## Before you begin Familiarize yourself with multi-factor authentication \(MFA\) concepts. For more information, see [Multi-factor authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/mfa-landing.md). Familiarize yourself with the TOTP authentication in RPA Hub. For more information, see [TOTP authentication in RPA Hub](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/integrate-applications/totp-authentication-rpa.md). You must do this task in the classic environment. Role required: sn\_rpa\_fdn.rpa\_release\_manager or sn\_rpa\_fdn.rpa\_admin ## About this task An authenticator application is a third-party software that generates temporary passcodes. Users can use these passcodes along with their password to log in to an instance that requires multi-factor authentication \(MFA\). For example, the following applications support Time-based One-time Passwords \(TOTP\): - Google Authenticator - Microsoft Authenticator - Okta Verify For more detail on these applications, see [Authenticator applications](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/mfa-auth-app.md). The MFA authenticator record acts as an input to the Time-based One-time Password \(TOTP\) authenticator. After you create an MFA authenticator record, all the fields are read-only. You can't edit an MFA authenticator record. If changes are required to an existing MFA record, you must retire an existing record and then create an MFA authenticator record. ## Procedure 1. Navigate to **All** > **Robotic Process Automation** > **Administration** > **Authenticators**. 2. Select **New**. 3. On the form, fill in the fields.
| Field | Description |
|---|---|
| Name | Unique name of the MFA authenticator.For example, Google Authenticator. |
| Token Length | Length of the generated Time-based One-time Password \(TOTP\) that depends on the authenticator you have selected:- **6**- The minimum length of the TOTP that is generated. - 7 - 8 - **9**- The maximum length of the TOTP that is generated. |
| Life Cycle Stage Status | Status of the life-cycle stage of the MFA authenticator:- **In Use**- This value is the default. - **Retired** |