Canvas AuTOTP A browser extension that autofills 2FA TOTP codes for Canvas-based sites that support ADSF Microsoft Authenticator bypass!! Usage

[!warning] This WILL reduce the security of your account. You will be using the same device for something that is intended to use 2. There is no secrets encryption as of v1.0 (for maximum convenience)

You must only complete this steps once per site It takes 1-2 minutes. (Important! Please follow)

Install this extension in your browser
Go to Security Info (microsoft.com)
Click on Add Sign-in method -> Microsoft Authenticator
Click on I want to use a different authenticator app -> Next
Click on Can't scan image?
Copy the contents after "Secret key: " by clicking the Copy button next to it -> Next
On a new tab go to the login page for the site you wish to skip the MFA
If you get automatically logged in, log out
In that tab, open the "Canvas AuTOTP" extension by clicking on it
Paste the secret that you copied from earlier -> click the Submit button -> click the Copy Code
Go back to the microsoft.com tab and paste the code there
Change "Default Sign-in method" by clicking on Change (above the sign-in methods but below the title)
In the popup, click the downwards arrow and select App based authentication or hardware token - code
Click Confirm

That's it! Once you login in on your canvas site, it should automatically fill in the code and sign you in. How it works At the core it just autofills TOTP (Time-based One Time PINs). TOTP are generated from a secret, which must be initially provided by the login management server, in this case Microsoft. They are usually regenerated every 30 seconds. The TOTP generation functionality is borrowed from Turistu, for more information see Credit. What I have made is just a wrapper for that TOTP generation code, and automated it's generation and completion for Canvas-based sites. The program stores the secrets in the Extension Storage, and each secret is associated with a key of the domain that it works on. When you are in a website that contains /adfs/ls/ in its url, the program interprets it as a Canvas login page and searches and tries to autocomplete the input to submit the TOTP. Once it does that, it automatically clicks the login button aswell. Since I wanted this extension to be a superset of TOTP, it also includes the ability to manually copy the TOTP codes. Credit The TOTP functionality is the one from totp-in-javascript by turistu