IBM Security Access Manager for Enterprise Single Sign-On, Version 8.2.1

Planning for authentication factors

IBM® Security Access Manager for Enterprise Single Sign-On supports the use of different authentication factors such as fingerprints, RFID and smart card devices, and one-time passwords.

See the following topics:

Primary authentication factors
You can use the IBM Security Access Manager for Enterprise Single Sign-On password, and directory server credentials as primary authentication factors. Secrets are typically used to recover credentials or as an alternative to bypass a strong authentication factor.
Strong authentication
Use a second factor device such as smart card or RFID card to enforce strong authentication.
Fingerprint authentication
IBM Security Access Manager for Enterprise Single Sign-On supports fingerprint authentication of users in both personal and shared workstations.
Smart card authentication
IBM Security Access Manager for Enterprise Single Sign-On supports the use of smart cards for user authentication in both personal and shared workstations.
Hybrid smart card authentication
IBM Security Access Manager for Enterprise Single Sign-On supports the use of hybrid smart cards for user authentication in both personal and shared workstations.
RFID authentication
IBM Security Access Manager for Enterprise Single Sign-On supports the use of RFID cards for user authentication in both personal and shared workstations.
OTP and Mobile ActiveCode authentication
IBM Security Access Manager for Enterprise Single Sign-On supports the use of one-time passwords (OTP) and Mobile ActiveCodes (MAC) to authenticate users that log on to corporate VPN servers, AccessAssistant, or Web Workplace.
Authorization code authentication
An authorization code is a system-generated code that is used as an authentication factor for specific scenarios. There are two types of authorization codes: online authorization code and offline authorization code.

Parent topic: Planning and Deployment Guide

Feedback