IBM Security Verify

Shape the future of IBM Security Verify

We invite you to shape the future of IBM, including the product roadmap, by submitting ideas that matter to you the most.

Here's how it works:

Post your ideas

Start by posting ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea

Submit a private idea

If you have confidential information or customer data to share with your idea, then - DO NOT submit using the link below, instead - please open a private feature request.

And finally - if its an issue with expected behaviour, a product defect or a support need, open a Support Case

Display the TOTP Secret in addition to the QR Code when enrolling an Authenticator app.

RFC 6238 is a public algorithm.  Automation can be scripted using the TOTP Secret to generate TOTPs as needed to fulfill 2nd factor challenges.  CI does not display the secret, however the secret is returned in the payload of the POST.


Critical applications are using New Relic synthetic scripts to monitor availability, alert, and update executive dashboards.


Advising users to leverage developer tools to find the secret is complex and error prone.

  • Guest
  • Feb 11 2020
  • Delivered

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.