If the user has a TGT already, ipa otptoken-sync should use it for the first factor.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1200827
Moving to 4.3, we are too close to 4.2 deadline to be able to handle this stretch RFE.
Metadata Update from @npmccallum: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.5 backlog
Log in to comment on this ticket.