# User ID and one-time password

Based upon a unique token, a one-time password can be generated by a third party product. One-time passwords improve your security setup as the unique token cannot be copied and used without the user's knowledge, and an intercepted password is useless since it is valid only once.

The client provides a user ID and the one-time password upon connection, which is used to authenticate the user ID with the security exit provided by the third party. This security exit is expected to ignore the PassTickets used to satisfy authentication requests during normal processing. The PassTickets must be processed by your security software.

No additional customization is needed to use this authentication mechanism.

Parent topic: Enhanced client authentication support