Multi-factor authentication

IBM® Enterprise Edition for Galasa supports multi-factor authentication (MFA) for connecting to z/OS systems either by using the supplied Time-based One Time Password (TOTP) capability, or by creating your own MFA Manager.

MFA support has the usage of Secure Storage as a prerequisite and requires at least one additional credential property to be stored. The mfa property specifies a token that is used as an index to the Central Property Store (CPS) property securecredentials.mfa.[TAG].manager and any other CPS properties specific to the MFA implementation used. securecredentials.mfa.[TAG].manager defaults to com.ibm.galasa.security.internal.TotpMfaManager which is the TOTP Manager supplied with IBM Enterprise Edition for Galasa.