Alternative IBM i MFA solution
IBM® PowerSC provides an alternative IBM i multi-factor authentication (MFA) solution with several types of additional factors. However, it is not integrated into the operating system.
The IBM PowerSC MFA out-of-band authentication requires the user to authenticate to the out-of-band web page with one or more factors to retrieve an authentication code called a cache token credential (CTC). The PowerSC MFA agent running on IBM i changes the user profile password to be the CTC value. The user then enters the CTC value obtained from the web page as their password. IBM PowerSC MFA for IBM i is available for releases prior to IBM i 7.6. For more information, refer to https://www.ibm.com/docs/en/powersc-mfa.