Are there OTPs enabled on sandbox? Is it functional? How does it work?
In sandbox, OTPs are enabled for certain users as an authentication/validation method, which is configurable from the developer portal under “Integration/Test users”. For testing purposes, all OTPs are automatically set to “1111”.