Repository: privacyidea/privacyidea

Issue:
TIQR tokens generates new transaction_ids during validate/triggerchallenge
If a user has enrolled one (or more) TIQR token, this token generate a new transaction_id during the API call of validate/triggerchallenge.

API call with TIQR tokens:

<pre><font color="#8AE234"><b>tamaro@Tamaros</b></font>:<font color="#729FCF"><b>~</b></font>$ http POST https://netknights.it/validate/triggerchallenge authorization:$token user=admin
<font color="#0087FF">HTTP</font><font color="#8A8A8A">/</font><font color="#00AFAF">1.1</font><font color="#8A8A8A"> </font><font color="#00AFAF">200</font><font color="#8A8A8A"> </font><font color="#AF8700">OK</font>
<font color="#8A8A8A">Cache-Control: </font><font color="#00AFAF">no-cache</font>
<font color="#8A8A8A">Connection: </font><font color="#00AFAF">Keep-Alive</font>
<font color="#8A8A8A">Content-Length: </font><font color="#00AFAF">7437</font>
<font color="#8A8A8A">Content-Type: </font><font color="#00AFAF">application/json</font>
<font color="#8A8A8A">Date: </font><font color="#00AFAF">Tue, 02 Jul 2019 08:32:24 GMT</font>
<font color="#8A8A8A">Keep-Alive: </font><font color="#00AFAF">timeout=5, max=100</font>
<font color="#8A8A8A">Server: </font><font color="#00AFAF">Apache/2.4.29 (Ubuntu)</font>

<font color="#8A8A8A">{</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;detail&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">            </font><font color="#0087FF">&quot;hideResponseInput&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#0087FF">&quot;img&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;data:image/png;base64,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&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#0087FF">&quot;poll&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqrauth://admin_owncloud@org.privacyidea/17016499221764619447/1870833416&quot;</font>
<font color="#8A8A8A">        },</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!, please enter otp: , Please scan the QR Code, please enter otp: , please enter otp: , Please confirm the authentication on your mobile device!, Please confirm the authentication on your mobile device!, Please scan the QR Code&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;messages&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please scan the QR Code&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please scan the QR Code&quot;</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;multi_challenge&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;PIPU000006FC&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;02819530868806991456&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;push&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;OATH0001B9EA&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;02819530868806991456&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;hotp&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;hideResponseInput&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;img&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;data:image/png;base64,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&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;poll&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqrauth://admin_owncloud@org.privacyidea/11531122356364254025/4159942641&quot;</font>
<font color="#8A8A8A">                },</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please scan the QR Code&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;TiQR0000E86F&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqr&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;OATH0002B4E7&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;hotp&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;OATH00030FEC&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;hotp&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;PIPU00019E49&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;push&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;PIPU0002B3C1&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;push&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;hideResponseInput&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;img&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;data:image/png;base64,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&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;poll&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqrauth://admin_owncloud@org.privacyidea/17016499221764619447/1870833416&quot;</font>
<font color="#8A8A8A">                },</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please scan the QR Code&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;TiQR0001419B&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;17016499221764619447&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqr&quot;</font>
<font color="#8A8A8A">            }</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;TiQR0001419B&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;threadid&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">140603759847168</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;17016499221764619447&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;transaction_ids&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;02819530868806991456&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;02819530868806991456&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;11531122356364254025&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;17016499221764619447&quot;</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqr&quot;</font>
<font color="#8A8A8A">    },</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">1</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;jsonrpc&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;2.0&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;result&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;status&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">8</font>
<font color="#8A8A8A">    },</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;signature&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;rsa_sha256_pss:...&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;time&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">1562056345.52433</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;version&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;privacyIDEA 3.0.1&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;versionnumber&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;3.0.1&quot;</font>
<font color="#8A8A8A">}</font>
</pre>

And here without TIQR tokens:

<pre>
<font color="#8AE234"><b>tamaro@Tamaros</b></font>:<font color="#729FCF"><b>~</b></font>$ http POST https://netknights.it/validate/triggerchallenge authorization:$token user=admin
<font color="#0087FF">HTTP</font><font color="#8A8A8A">/</font><font color="#00AFAF">1.1</font><font color="#8A8A8A"> </font><font color="#00AFAF">200</font><font color="#8A8A8A"> </font><font color="#AF8700">OK</font>
<font color="#8A8A8A">Cache-Control: </font><font color="#00AFAF">no-cache</font>
<font color="#8A8A8A">Connection: </font><font color="#00AFAF">Keep-Alive</font>
<font color="#8A8A8A">Content-Length: </font><font color="#00AFAF">3210</font>
<font color="#8A8A8A">Content-Type: </font><font color="#00AFAF">application/json</font>
<font color="#8A8A8A">Date: </font><font color="#00AFAF">Tue, 02 Jul 2019 08:40:00 GMT</font>
<font color="#8A8A8A">Keep-Alive: </font><font color="#00AFAF">timeout=5, max=100</font>
<font color="#8A8A8A">Server: </font><font color="#00AFAF">Apache/2.4.29 (Ubuntu)</font>

<font color="#8A8A8A">{</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;detail&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!, please enter otp: , please enter otp: , please enter otp: , Please confirm the authentication on your mobile device!, Please confirm the authentication on your mobile device!, please enter otp: , please enter otp: , Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;messages&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;multi_challenge&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;PIPU000006FC&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;push&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;OATH0001B9EA&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;hotp&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;OATH0002B4E7&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;hotp&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;OATH00030FEC&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;hotp&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;PIPU00019E49&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;push&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;PIPU0002B3C1&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;push&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;OATH0004B044&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;hotp&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;please enter otp: &quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;OATH00056CB5&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;hotp&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">null</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please confirm the authentication on your mobile device!&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;PIPU00036875&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;push&quot;</font>
<font color="#8A8A8A">            }</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;PIPU00036875&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;threadid&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">140603793434368</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;transaction_ids&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;04227522810062429284&quot;</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;push&quot;</font>
<font color="#8A8A8A">    },</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">1</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;jsonrpc&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;2.0&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;result&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;status&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">9</font>
<font color="#8A8A8A">    },</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;signature&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;rsa_sha256_pss:...&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;time&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">1562056801.78957</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;version&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;privacyIDEA 3.0.1&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;versionnumber&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;3.0.1&quot;</font>
<font color="#8A8A8A">}</font>
</pre>



Discussion:
In the list it looks like as if the occurrance of a TiQR token changes the transaction id.

Does this also happen if the user only has two tiqr tokens? Or is it necessary, that the user has a tiqr token and other token types?

Yes this also happen when the user only has two tiqr tokens. (Whereby the TIQR-App doesn't allow more than one tiqr token for in a device for the same user.)

<pre>
<pre><font color="#8AE234"><b>tamaro@Tamaros</b></font>:<font color="#729FCF"><b>~</b></font>$ http POST https://netknights.it/validate/triggerchallenge authorization:$token user=admin
<font color="#0087FF">HTTP</font><font color="#8A8A8A">/</font><font color="#00AFAF">1.1</font><font color="#8A8A8A"> </font><font color="#00AFAF">200</font><font color="#8A8A8A"> </font><font color="#AF8700">OK</font>
<font color="#8A8A8A">Cache-Control: </font><font color="#00AFAF">no-cache</font>
<font color="#8A8A8A">Connection: </font><font color="#00AFAF">Keep-Alive</font>
<font color="#8A8A8A">Content-Length: </font><font color="#00AFAF">5726</font>
<font color="#8A8A8A">Content-Type: </font><font color="#00AFAF">application/json</font>
<font color="#8A8A8A">Date: </font><font color="#00AFAF">Wed, 03 Jul 2019 09:32:54 GMT</font>
<font color="#8A8A8A">Keep-Alive: </font><font color="#00AFAF">timeout=5, max=100</font>
<font color="#8A8A8A">Server: </font><font color="#00AFAF">Apache/2.4.29 (Ubuntu)</font>

<font color="#8A8A8A">{</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;detail&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">            </font><font color="#0087FF">&quot;hideResponseInput&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#0087FF">&quot;img&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;data:image/png;base64,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&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#0087FF">&quot;poll&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqrauth://admin_owncloud@org.privacyidea/14083824023992651806/3623734750&quot;</font>
<font color="#8A8A8A">        },</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please scan the QR Code, Please scan the QR Code&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;messages&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please scan the QR Code&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;Please scan the QR Code&quot;</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;multi_challenge&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;hideResponseInput&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;img&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAcIAAAHCAQAAAABUY/ToAAADs0lEQVR4nO2cUWrjShBFTz0J9NkGL8BLae0sZEnZgbSUWcCA+tPQot5HdVstT8JAiImVqfqIY9kHqaFoVd26liifi/m/T4LgpJNOOumkk046+XyklOgBVmGWHkg9IlL+QKrfGr/5ap18SjKqquoCQKfysoDI5So6AToBMtKpqqruyc+f08kfQvblNZ0gvoHEt5MdUVKPEBYk6ipKAoEuf+PVOnkMMqgyX67CfMlA6oE0/CkBPMfVOvmkpN28Xn71ELXc0GR87DmdPCxZ72VBgQSQzlnirx6gy0I6K4SrANDuRsdap5MPJ2cRETltx7smXWS0e9lqbdlXndPJH0LaPtQkzHxCFDIQMgoZLcf2NdGx1unk40isXY8LgHXvGZ1CZmv1ifdfUdXpWOt08nHkLYeq+BM1o6q5aEZTUNXplly6FMJzyMlbbJljb6dwS6mlUwgZymZUlaHoOeTkn+Qsg+05wCo6hYyMIVuXr7qsotM+kY65TicfQJZ9iFBmGDqFDIR6G9MFyr1sAbwecvIjMi6rEDUjYxpqviQRkUvp0GS0vLr6zNXJD8hOIQ1WOsvIKiVp6NQyjNRDXDqfuTr5Hqmvp1XKlExEmE+gUxKBJNUKwn7gccR1OvkI0pJD7J80qERde+Jbj0QFCL97ics5C+EqSjr73N7JfZQNJk7boU6FkHstk7NBZb5cRcG8H1WuPtY6nXwcWRXD0AqNpjHap1YAVaUobuLjsdbp5OPJ1MN8udrgVUR6E6ttDhtNH4LWSXTMdTr59WQzLyu+171SFOs+ZDtSXPB9yMm72CzSVW3MdeChGUsuS586jPUccvI9MqpqNQdtgtBg+pCM4So6pUGLNfa7r9bJZyVLdQ0UQShUE9Gr9MjIKuYC+cJzOvkDyFtfVuar0Pg8uqYy2j71e5mT+9iqoK0AKn6zOnitFXdXcs1nrk7uovEPFdcQNP4hq6RNH6rCke9DTu6i6e1vTkXr6G8+xrIPNY5GzyEnm6g51N1m9F19W7Vr2p95eA45eR+6D6Cmj0Vo7dW1bvIccvKe3J77Ye2XDTdu/qHiLnL/kJPvxW5un85IXM52SEDKqz2pwdz5a+9zeyffJVN9rtB8qh+V4YaqqlZzmuvUTv6dNGko9eirDCqjPchqKAI2wXVqJ+9j6+1LsbMV0QvU33Vsnb/r1E5+QIYyKitD1tTbhEPk1Km8qKqMX35OJ38G2Xg/aOyKS52SNf0+1K7N9yEnmxB/xrmTTjrppJNOOvmPk/8D71/3MwIuwJgAAAAASUVORK5CYII=&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;poll&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqrauth://admin_owncloud@org.privacyidea/03042379450406387765/1376386222&quot;</font>
<font color="#8A8A8A">                },</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please scan the QR Code&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;TiQR0000E86F&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;03042379450406387765&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqr&quot;</font>
<font color="#8A8A8A">            },</font>
<font color="#8A8A8A">            {</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;attributes&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;hideResponseInput&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;img&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;data:image/png;base64,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&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;poll&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                    </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqrauth://admin_owncloud@org.privacyidea/14083824023992651806/3623734750&quot;</font>
<font color="#8A8A8A">                },</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;message&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;Please scan the QR Code&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;TiQR00025A24&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;14083824023992651806&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">                </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqr&quot;</font>
<font color="#8A8A8A">            }</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;serial&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;TiQR00025A24&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;threadid&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">140603793434368</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;transaction_id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;14083824023992651806&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;transaction_ids&quot;</font><font color="#8A8A8A">: [</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;03042379450406387765&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">            </font><font color="#00AFAF">&quot;14083824023992651806&quot;</font>
<font color="#8A8A8A">        ],</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;type&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;tiqr&quot;</font>
<font color="#8A8A8A">    },</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;id&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">1</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;jsonrpc&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;2.0&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;result&quot;</font><font color="#8A8A8A">: {</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;status&quot;</font><font color="#8A8A8A">: </font><font color="#D75F00">true</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">        </font><font color="#0087FF">&quot;value&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">2</font>
<font color="#8A8A8A">    },</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;signature&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;rsa_sha256_pss:censored&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;time&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">1562146374.552462</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;version&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;privacyIDEA 3.0.1&quot;</font><font color="#8A8A8A">,</font>
<font color="#8A8A8A">    </font><font color="#0087FF">&quot;versionnumber&quot;</font><font color="#8A8A8A">: </font><font color="#00AFAF">&quot;3.0.1&quot;</font>
<font color="#8A8A8A">}</font>
</pre>
</pre>

Resolving patch:
diff --git a/privacyidea/lib/tokens/tiqrtoken.py b/privacyidea/lib/tokens/tiqrtoken.py
--- a/privacyidea/lib/tokens/tiqrtoken.py
+++ b/privacyidea/lib/tokens/tiqrtoken.py
@@ -384,7 +384,7 @@ def create_challenge(self, transactionid=None, options=None):
 
         # Create the challenge in the database
         db_challenge = Challenge(self.token.serial,
-                                 transaction_id=None,
+                                 transaction_id=transactionid,
                                  challenge=challenge,
                                  data=None,
                                  session=options.get("session"),


Test patch:
diff --git a/tests/test_api_validate.py b/tests/test_api_validate.py
--- a/tests/test_api_validate.py
+++ b/tests/test_api_validate.py
@@ -3164,6 +3164,39 @@ def test_09_challenge_response_inc_failcounter(self):
         remove_token("tok2")
         delete_policy("pol_hotp")
 
+    def test_10_unique_transaction_id(self):
+        # Tokens should create a unique transaction id
+        # The TiQR token changes the transaction id.
+
+        # Assign token to user:
+        r = init_token({"serial": "tok1", "type": "hotp", "otpkey": self.otpkey},
+                       user=User("cornelius", self.realm1))
+        self.assertTrue(r)
+        r = init_token({"serial": "tok2", "type": "tiqr", "otpkey": self.otpkey},
+                       user=User("cornelius", self.realm1))
+        self.assertTrue(r)
+
+        set_policy("chalresp", scope=SCOPE.AUTHZ, action="{0!s}=hotp".format(ACTION.TRIGGERCHALLENGE))
+
+        with self.app.test_request_context('/validate/triggerchallenge',
+                                           method='POST',
+                                           data={"user": "cornelius"},
+                                           headers={"authorization": self.at}):
+            res = self.app.full_dispatch_request()
+            self.assertTrue(res.status_code == 200, res)
+            data = json.loads(res.data)
+            self.assertTrue(data.get("result").get("status"))
+            self.assertEqual(data.get("result").get("value"), 2)
+            # The two challenges should be the same
+            multichallenge = data.get("detail").get("multi_challenge")
+            transaction_id = data.get("detail").get("transaction_id")
+            self.assertEqual(multichallenge[0].get("transaction_id"), transaction_id)
+            self.assertEqual(multichallenge[1].get("transaction_id"), transaction_id)
+
+        delete_policy("chalresp")
+        remove_token("tok1")
+        remove_token("tok2")
+
 
 class TriggeredPoliciesTestCase(MyApiTestCase):