"description":"Number of token windows on either side of current time to be considered valid for authentication."
},
"OATHAuthAccountPrefix":{
"value":false,
"description":"Prefix for user account shown during enrollment."
},
"OATHExclusiveRights":{
"value":[],
"description":"List of permissions that are revoked from users who do not use two-factor authentication."
},
"OATHRequiredForGroups":{
"value":[],
"description":"List of user groups that must use two-factor authentication."
},
"OATHRolloutPercent":{
"value":0,
"description":"Percentage of users to add to 2FA rollout."
},
"OATHSecretKey":{
"value":false,
"description":"A secret key value for encrypting OATH-related data which should be SODIUM_CRYPTO_SECRETBOX_KEYBYTES hexadecimal bytes (64 chars) in length. This variable is currently considered immutable. Do not publicly set this value."
},
"OATHPrioritizedModules":{
"value":[
"webauthn",
"totp",
"recoverycodes"
],
"description":"List of authentication methods in the order that they should be prioritized."
},
"OATHRecoveryCodesCount":{
"value":10,
"description":"The default amount of recovery codes to generate for a given user."