OTP "Invalid authenticator code."

[rabee abif]

Hello everyone,

I'm trying to configure OTP feature in keycloak 10.0.0, everything is working fine if there is a clock sync, or The phone's clock that uses FreeOTP is behind the server's clock and the "Look Ahead Window" is configured correctly.

The only failure scenario that happens with me is if the phone's clock that uses FreeOTP is even 1 minute ahead of the server's clock.

Is my conclusion right? and if yes how can i fix this problem?

[Salatiel Filho]

Is the look ahead window working for you ?

For me OTP only works if in perfectly sync even with Look ahead window set for 10 or more.