General logon approach
As a general rule, if you are presented with an in-band request for logon credentials, enter your IBM® MFA credentials.
If you are presented with a request for in-band logon credentials, try your IBM MFA credentials first. This is true even if your account is configured to use PassTickets, because you may be required to first log on with IBM MFA.
For IBM MFA Out-of-Band, a user-specific web page prompts you for all of the authentication credentials you must provide.