Developer forum

Hi Shiwanka

I am not sure I understand the question. If you use DW10 OTP, the user has to use that - you cannot combine it.

You can create 2 different users with the same username by giving them different shopids - and submit the shopid when logging in to hit the correct profile - you might be able to use that trick to have 2 different login methods for the same username.

Login procedure is described here: https://doc.dynamicweb.dev/documentation/implementing/users/login.html?tabs=regular-login%2Cimpersonation

HI Nicolai

this is DW9 , requirement is to create one user who can login using OTP and password both options.

we create OTP login, but when user legged using OTP then saved password is changed.

If the user is OTP - it has no password... Nor should he.

OTP = One Time Password = You should not have a password....

Otherwise it has to be a MFA - there the user will have a password and get a code.

OK Clear

When login through OTP to the frontend, its logout with in 20-30min

is there anyway to increase that. we used ExternalLoginProvider

public override ExternalLoginResult GetLoginResult()
{

var loginResult = new ExternalLoginResult();

loginResult.Success = true;
loginResult.ProviderID = ProviderID;
loginResult.DefaultUserName = user.UserName;
loginResult.ProviderKey = user.ID.ToString();

return loginResult;

}

        public override void Login()
        {
            OnlyDoVerificationExternally = true;
            AuthenticationProperties properties = new AuthenticationProperties() { RedirectUri = RedirectUrl, AllowRefresh = true, ExpiresUtc = DateTime.UtcNow.AddHours(8), IssuedUtc = DateTime.UtcNow, IsPersistent = true };
            System.Web.HttpContext.Current.GetOwinContext().Authentication.Challenge(properties, Name);
        }​

The login cookie has an expiration that can be set in the backend:

https://doc.dynamicweb.dev/manual/dynamicweb10/settings/areas/users/extranet.html

The login is controlled by a cookie - you can see the expiration date in the browser tools. That cookie is set if you set Autologin=True in the login form post.

in my case when user login using ExternalLoginProvider  logout with in 20-30mins,

but if anther user logged in with username and password on another browser it stays for long time.

cookie settings like this

That is DW9. Works a bit differently.

You have to have these set in your login post:

• DWExtranetUsernameRemember = True
• DWExtranetPasswordRemember = True
• Autologin = True

BR Nicolai

https://mancon-ecom.dwcmsweb.com/sign-in-1

any missing things, still max 30mins

you can try test code - shiwankaswe@gmail.com

OTP - 111222

Try sending in a hidden field "Password" with a random value.

The login cookie will not be set without the password - and you have changed it to not have password, but otp