Security

IBM Cloud Platform now adds support for Multi-Factor Authentication

May 1, 2018 | Written by:

Categorized: Security

Share this post:

In April 2018, IBM Cloud Platform added support for Multi-Factor Authentication (MFA). This adds an extra layer of security to users’ accounts by requiring all users to provide a time-based one-time passcode in addition to their standard IBMid and password when logging in. Having this option enables IT admins to rest a little easier knowing that they’re protecting their company’s network and workloads while keeping access flexible and easy.

How does it work?

The account owner can enable MFA on their account by going to the Manage > Security > Identity and Access > option from the header.  Then selecting Settings tab to see authentication options for the account. 
Please note that when MFA is enabled for the account, all users in the account are required to complete the MFA process next time they log in.  
Once enabling multi-factor authentication for the account, users logging into the account will be asked to install an authenticator application like Google Authenticator or IBM Verify.  If a user is a member to multiple accounts and at least one of those accounts is MFA-enabled, then the user must input MFA before logging into IBM Cloud.

Other Considerations:

  • MFA can be configured by the Account Owner on a per account basis and not on individual user IDs
  • Once MFA is enabled for the account, all users in the account are required to complete the MFA process next time they log in
  • MFA is not supported for federated users
  • API Keys for users and Service IDs will continue to work after MFA is enabled
  • Users of native CF CLI or UI login into CF must use API keys or SSO after MFA is enabled on the account
  • Linked Account users who previously configured IaaS IMS 2FA in the Control Portal should consider the following:
    • MFA for your IBM Cloud account extends across the platform and infrastructure services for your linked account, so you might choose to disable the 2FA that applies only to infrastructure resources in your account in favor of the MFA setting option.
    • If you are a federated user, MFA is not supported. Therefore, you might want to retain your 2FA for infrastructure only resources to ensure the security of your resources.

Reference Links:

Previous Post

Removal of Apache Kafka 0.9.00 Java client support from Event Streams (AKA Message Hub)

Next Post

IBM Cloud Support: An integrated client experience
More Security stories

Security

February 12, 2019

The State of IBM Cloud Security: Think 2019

Traditional security products are not designed to address the challenges of dynamic, virtual, and distributed cloud environments. IBM’s view is that enterprises today require an end-to-end approach to security that helps them achieve three core objectives in managing their risk and compliance through structured security practices.

Continue reading

Security

February 11, 2019

Announcing IBM Cloud Data Shield Beta at Think 2019

Since we announced IBM Cloud Data Shield experimental, we have been hard at work helping our early adopters (Irene Energy and iExec) develop their Zero Trust platforms and building the next version of Data Shield. Today, we are excited to announce Data Shield beta!

Continue reading

Security

February 11, 2019

IBM Cloud Security Advisor Now Integrates with the Twistlock Security Platform

Today, we are excited to further strengthen the relationship between IBM Cloud and Twistlock by announcing the integration of Security Advisor and the Twistlock security platform. We have integrated your IBM Cloud security tools into one dashboard and console to facilitate centralized security management.

Continue reading