That error message doesn't come from needing a otp it comes from there being outstanding required actions. However, I'm pretty sure we don't support direct grant with users that have otp enabled. We should though so you can create a feature request On 18 January 2016 at 05:36, Rajees Patel <Rajees.Patel(a)invenco.com <mailto:Rajees.Patel@invenco.com>> wrote: Hi, How can I get direct access grants for a user set up with totp? I tried posting the totp code, but received this error. { "error_description": "Account is not fully set up" "error": "invalid_grant" } Thanks Rajees Patel Product Architect Invenco Group Limited O: +64 9 905 5673 <tel:%2B64%209%20905%205673> Rajees.Patel(a)invenco.com <mailto:Rajees.Patel@invenco.com> *www.invenco.com <http://www.invenco.com>* *Disclaimer: This email is confidential and may be legally privileged. If you are not the intended recipient you must not use any of the information in it and must delete the email immediately.* _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-user _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user