Keycyte PAM 3.2 · Administrator Guide
Configuring Notifications
Keycyte PAM sends e-mail for MFA codes and setup, access requests, scheduled reports and discovery results, and SMS for MFA codes. The Notification page configures both channels.
To open the page, select Settings > Notification. The page has three cards: Email Configuration, MFA Customization and Sms Configuration.
Email Configuration
To configure the SMTP server:
-
On the Email Configuration card, specify the following settings:
Field Description Host Host name or IP address of the SMTP server, for example smtp.example.com.Port SMTP port. Default: 587.Encryption None (plain SMTP / relay) (default), STARTTLS (587) or SSL/TLS (465). Skip TLS verify Skips validation of the SMTP server certificate. HELO hostname Optional name that Keycyte PAM announces to the SMTP server, for example pam.example.com.From address Sender address, for example noreply@example.com.From name Sender display name, for example Keycyte PAM.Authentication Select Required if the SMTP server requires sign-in. Username, Password SMTP account, when authentication is required. Leave Password empty to keep the current password. -
Click Save.
-
To check the settings, click Test, enter an address in the Email Test dialog and click Test. The result appears in the dialog.
Warning
Select Skip TLS verify only for troubleshooting or with an internal relay you trust.
MFA Customization
Use the MFA Customization card to change the e-mails that users receive for MFA.
| Field | Description |
|---|---|
| QR Code Subject | Subject of the MFA setup e-mail that contains the QR code. Default: Keycyte MFA Setup Information. |
| QR Content | HTML body of the MFA setup e-mail. Leave it empty to use the default template. In a custom body, the first %s is replaced with the QR code image (Base64-encoded PNG) and the second %s with the secret key. |
| Email Subject | Subject of the e-mail that carries a one-time code. Default: Keycyte PAM - Verification Code. |
| Email Content | Body of the one-time code e-mail. {username} is replaced with the user name and {otp} with the code. Default: Hello {username}, your verification code is: {otp}. |
Click Save to apply the changes.
Important
A custom QR Content must contain exactly two %s placeholders, in this order: QR image, then secret key.
Sms Configuration
To send one-time codes by SMS, configure an SMS gateway.
-
In Provider, select the gateway type. The form shows only the fields that the selected gateway uses.
Provider Fields İVTbox (token + JSON POST) Token URL, SMS URL, Username, API Key Generic HTTP GET (URL template) SMS URL, Username, Password TT Mesaj (token + JSON POST) Token URL, SMS URL, Username, Password, Sender / Header, Token Username, Token Password If you leave Provider empty (Auto-detect (legacy)), Keycyte PAM treats an SMS URL that contains placeholders as a generic GET template and anything else as İVTbox.
-
Fill in the fields:
Field Description Token URL Address where Keycyte PAM obtains an access token from the gateway. SMS URL Address of the send request. For Generic HTTP GET, this is a URL template; Keycyte PAM replaces <username>,<password>,<phone>and<message>with URL-encoded values.Username, Password, API Key Gateway credentials. Sender / Header SMS header registered with the provider. Token Username, Token Password Separate credentials for the token request. Leave them empty if they are the same as the sending account. OTP Message Text of the SMS. Use {otp}where the code should appear. Leave it empty for the default text. -
Click Save.
-
To check the settings, click Test, enter a phone number in the Phone Test dialog and click Test.
An example SMS URL template for a generic gateway:
https://sms.example.com/send?user=<username>&pass=<password>&to=<phone>&text=<message>Tip
Keep OTP Message short. Most gateways split messages longer than 160 characters.