Home / Integration plugins / RCDevs OpenOTP SMS OTP Integration

+

Send SMS OTP codes from RCDevs OpenOTP

When a user signs in through RCDevs OpenOTP, the one-time code is sent by SMS through SMSEagle, your own hardware SMS gateway. The request stays in your local network, with no cloud SMS provider.

OTP codes never touch a third party

OpenOTP’s SMS hub normally routes codes through a cloud SMSC. The SMSEagle plugin keeps the request on your local network and sends the code from your own device over the cellular network.

Works in isolated and air-gapped networks

Cloud SMSC delivery needs outbound internet access from your OpenOTP server. SMSEagle sends messages on-premises over its own cellular connection, delivering OTP codes even in fully offline installations.

Predictable cost, no vendor dependency

Cloud SMSC delivery is billed per message, often at premium authentication rates. SMSEagle sends over a standard SIM at local carrier rates – no per-message fees, no external contract.

How it works

1

Login attempt

A user authenticates against an application protected by RCDevs OpenOTP and requests an SMS one-time password.

2

SMSC request

OpenOTP’s SMS hub calls the SMSEagle plugin (Custom1) with the user’s phone number and the generated OTP code.

3

Code delivery

SMSEagle delivers the code over its own cellular connection, not through a third-party service, as an SMS to the user’s own phone.

Set up in about 10 minutes

Copy the SMSEagle script to OpenOTP and select it as the SMS gateway, and codes are sent by SMS.

SMSEagle sends RCDevs OpenOTP one-time codes by SMS from your own device, with no cloud SMS provider.

Works on any phone

An SMS code needs no app: people receive it on any mobile phone.

Every code sent is recorded

SMSEagle records every code it sends, together with its status, so you can check whether it was received.

Logins work even if one device fails

Two SMSEagle devices can work as an HA cluster: if one fails, the other takes over sending codes.

SMSEagle configuration

  1. Create a new user in SMSEagle (menu Users > + Add Users) with access level “User”.
  2. Grant API access to the created user:
    • click Access to API beside the newly created user
    • enable APIv2
    • add access permissions in section APIv2 Permission for Send SMS
    • click Save settings
  3. Open the menu Settings > SSL page. Set Forward HTTP to HTTPS to “No”.

RCDevs OpenOTP configuration

  1. Download the custom1.php script from our repository: github.com/smseagle/smseagle-rcdevs_openotp and place it in your OpenOTP/smsc directory.
    • The script is used as Custom 1. If that slot is already taken, rename the file to customX.php and change smshub_custom1 in line 27 to smshub_customX, where X is a number from 2 to 4.
  2. The rest of the setup is done in the OpenOTP SMS Gateway configuration.

Configure it with:

  • SMS Gateway: choose Custom1.
  • SMSC Username: the username of the SMSEagle API user you created above.
  • SMSC Password: the APIv2 Access Token.
  • SMSC Custom Name: SMSEagle.
  • SMSC URL or address: https://SMSEagle_IP, where SMSEagle_IP is the IP address of your gateway.

You also have to set SMS as the OTP token for every user in the MFA application:

Explore SMSEagle Demo device

SMSEagle is a hardware & software solution that guarantees a swift delivery of your messages to designated recipients, whether it’s for notifications, alerts, or important updates.

After registering to a demo you get a remote access to our physical device NXS-9750.

  • 14-days free trial
  • Access to over 20 functionalities

What is hardware
SMS Gateway?

Learn more about
SMSEagle features