IntenseFinance/zitadel
3
0
Fork 0
mirror of https://github.com/zitadel/zitadel.git synced 2026-08-18 17:05:03 -05:00
Code Issues Packages Projects Releases Wiki Activity

docs: document TOTP issuer name configuration for self-hosted and cloud instances (#12335)

Browse Source 
# Which Problems Are Solved
- No documentation explained that the TOTP issuer name defaults to
"ZITADEL" and is not derived from the domain
- No documentation clarified how to change it on self-hosted (env var
only, Helm values don't work)
- No documentation communicated that it is not configurable on ZITADEL
Cloud

# How the Problems Are Solved
- Adds a callout in the MFA section of the default settings page
covering both self-hosted
(ZITADEL_SYSTEMDEFAULTS_MULTIFACTORS_OTP_ISSUER) and cloud (not
configurable, discussion link)

# Additional Changes
None

# Additional Context
- https://github.com/zitadel/zitadel/discussions/5453

Signed-off-by: Rajat Singh <rajat@zitadel.com>
Co-authored-by: Rajat Singh <rajat@zitadel.com>
This commit is contained in:
Rajat Singh
2026-07-13 11:37:43 +00:00
committed by GitHub
co-authored by Rajat Singh
parent 5bdfd96be5
commit 6bcdb27e17
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/docs/content/guides/manage/console/default-settings.mdx
+7
View File
@@ -197,6 +197,13 @@ Force a user to register and use a multifactor authentication, by checking the o
Ensure that you have added the MFA methods you want to allow.
Or you can enable the "Force MFA for local authenticated users", which will enforce this rule only on local authentication, but not on users authenticated through an Identity Provider.
<Callout type="info" title="Customizing the TOTP issuer name">
The issuer name shown in authenticator apps (e.g. Google Authenticator, Authy) when users register TOTP defaults to **ZITADEL**. It is not derived from your domain or instance name.
- **Self-hosted:** Set the environment variable `ZITADEL_SYSTEMDEFAULTS_MULTIFACTORS_OTP_ISSUER=YourName`. Note that setting this via Helm values (`SystemDefaults.Multifactors.Issuer`) does **not** work — the raw environment variable must be used directly.
- **ZITADEL Cloud:** The TOTP issuer name is not currently configurable. You can follow and upvote [this discussion](https://github.com/zitadel/zitadel/discussions/5453) to track progress.
</Callout>
### Login Lifetimes
Configure the different lifetimes checks for the login process: