IBM MFA configuration roadmap
Before you begin to configure IBM MFA, take note of the configuration roadmap.
Configuration roadmap
The configuration steps are described in detail in the relevant sections of this guide.
Note: See Configuring IBM MFA Out-of-Band authentication for important differences
between in-band and IBM MFA Out-of-Band authentication.
| Authentication Method | STC Configured/Started Needed? | Cache Name and Entries Needed? | Web Services Configured/Started Needed? | PKCS#11 Needed? | AT-TLS Needed? | ICSF Needed? |
|---|---|---|---|---|---|---|
| SecurID in-band | Y | Y | N | N1 | N | N1 |
| TouchToken or generic TOTP in-band | Y | Y | Y | Y | Y | Y |
| SafeNet RADIUS in-band | Y | Y | N | Y | N | Y |
| Generic RADIUS in-band | Y | Y | N | Y | N | Y |
| RSA SecurID RADIUS in-band | Y | Y | N | Y | N | Y |
| Out-of-band | Y | Y | Y | Y | Y | Y |
| Certificate PIV/CAC (requires out-of-band) | Y | Y | Y | Y | Y | Y |
| Express Logon Feature | Y | Y | Y | Y | Y | Y |
Notes:
- 1 Not generally needed, but required if using the IBM HTTP Server - Powered by Apache plug-in.