Wanted to know if anyone has setup multi factor authentication for B2B/SFG?  

We have been using it for inbound authentication but wanted to know if anyone has set this up for outbound communication.  And outside of ID/password what other forms of authentication are companies using.  We are aware of Google/Microsoft Authenticator for web access, but for other protocols such as FTPS/SFTP what are people using?

------------------------------
KHARLON GALBREATH
------------------------------

#DataExchange
#filetransfer

Dear Kharlon, B2B/SFG on its own doesn't manage multi-factor authentication. There's a specific product born to enhance security, the IBM Secure Proxy, that can be installed and configured with it's module SEAS to grant multi-factor authentication to B2B/SFG.
Please have a look at the related documentation here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.overview.doc/seas_user_authent_and_authrzn_steps.html) and here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.fielddefs.doc/seas_ldap_auth_def.html).
Best regards

------------------------------
Emiliano Pacelli
------------------------------

Emiliano thanks for the response.  We are already using multi-factor authentication for INBOUND communication via FTPS/SFTP/HTTPS protocols.  We were just curious how others using B2B/SFTP set it up.  If users are using stuff like digital certificates/SSH keys or some other method to do the 2nd form of authentication.

We actually ran a test yesterday and were able to do multi-factor authentication OUTBOUND using the SFTP protocol. 

Also does IBM have any plans to support multi-factor authentication going forward?

------------------------------
KHARLON GALBREATH
------------------------------

Original Message:
Sent: Tue January 14, 2020 02:32 AM
From: Emiliano Pacelli
Subject: Multi Factor Authentication using B2B/SFG Inbound and Outbound

Dear Kharlon, B2B/SFG on its own doesn't manage multi-factor authentication. There's a specific product born to enhance security, the IBM Secure Proxy, that can be installed and configured with it's module SEAS to grant multi-factor authentication to B2B/SFG.
Please have a look at the related documentation here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.overview.doc/seas_user_authent_and_authrzn_steps.html) and here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.fielddefs.doc/seas_ldap_auth_def.html).
Best regards

------------------------------
Emiliano Pacelli
------------------------------

Hi Emiliano,

When you mentioned that you were able to do multi-factor authentication OUTBOUND using SFTP protocol, are you referring to password & ssh key authentication from B2B Integrator?

Regards,
Ashwin

------------------------------
Ashwin Kumar Medishetty
------------------------------

Original Message:
Sent: Tue January 14, 2020 09:29 AM
From: Kharlon
Subject: Multi Factor Authentication using B2B/SFG Inbound and Outbound

Emiliano thanks for the response.  We are already using multi-factor authentication for INBOUND communication via FTPS/SFTP/HTTPS protocols.  We were just curious how others using B2B/SFTP set it up.  If users are using stuff like digital certificates/SSH keys or some other method to do the 2nd form of authentication.

We actually ran a test yesterday and were able to do multi-factor authentication OUTBOUND using the SFTP protocol. 

Also does IBM have any plans to support multi-factor authentication going forward?

------------------------------
KHARLON GALBREATH
------------------------------


Original Message:
Sent: Tue January 14, 2020 02:32 AM
From: Emiliano Pacelli
Subject: Multi Factor Authentication using B2B/SFG Inbound and Outbound

Dear Kharlon, B2B/SFG on its own doesn't manage multi-factor authentication. There's a specific product born to enhance security, the IBM Secure Proxy, that can be installed and configured with it's module SEAS to grant multi-factor authentication to B2B/SFG.
Please have a look at the related documentation here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.overview.doc/seas_user_authent_and_authrzn_steps.html) and here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.fielddefs.doc/seas_ldap_auth_def.html).
Best regards

------------------------------
Emiliano Pacelli

Hi Ashwin let me highlight again the MFA for Sterling B2B Integrator needs Secure Proxy or, and maybe this is what Kharlon did, a custom java code to be executed after successful login (IUserLoginUserExit_postAuthenticateFail  user exit) that asks for an additional authentication factor.
In case you want to leverage Secure Proxy, together with the documentation I shared 1 year ago, let me please point you to this blogpost from Vijay Chougle, our Secure Proxy Product Manager (https://community.ibm.com/community/user/supplychain/blogs/vijay-chougule/2021/02/24/multi-factor-authentication-for-ibm-sterling-b2b-c).
Hope this help.
Best regards
Emiliano

------------------------------
Emiliano Pacelli
------------------------------

Original Message:
Sent: Wed January 05, 2022 11:58 AM
From: Ashwin Kumar Medishetty
Subject: Multi Factor Authentication using B2B/SFG Inbound and Outbound

Hi Emiliano,

When you mentioned that you were able to do multi-factor authentication OUTBOUND using SFTP protocol, are you referring to password & ssh key authentication from B2B Integrator?

Regards,
Ashwin

------------------------------
Ashwin Kumar Medishetty
------------------------------


Original Message:
Sent: Tue January 14, 2020 09:29 AM
From: Kharlon
Subject: Multi Factor Authentication using B2B/SFG Inbound and Outbound

Emiliano thanks for the response.  We are already using multi-factor authentication for INBOUND communication via FTPS/SFTP/HTTPS protocols.  We were just curious how others using B2B/SFTP set it up.  If users are using stuff like digital certificates/SSH keys or some other method to do the 2nd form of authentication.

We actually ran a test yesterday and were able to do multi-factor authentication OUTBOUND using the SFTP protocol. 

Also does IBM have any plans to support multi-factor authentication going forward?

------------------------------
KHARLON GALBREATH


Original Message:
Sent: Tue January 14, 2020 02:32 AM
From: Emiliano Pacelli
Subject: Multi Factor Authentication using B2B/SFG Inbound and Outbound

Dear Kharlon, B2B/SFG on its own doesn't manage multi-factor authentication. There's a specific product born to enhance security, the IBM Secure Proxy, that can be installed and configured with it's module SEAS to grant multi-factor authentication to B2B/SFG.
Please have a look at the related documentation here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.overview.doc/seas_user_authent_and_authrzn_steps.html) and here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.fielddefs.doc/seas_ldap_auth_def.html).
Best regards

------------------------------
Emiliano Pacelli

Hi Kharlon,

When you mention you were able to do multi factor authentication Outbound using SFTP Protocol. Did you use the password and key authentication together from B2B?



------------------------------
Ashwin Kumar Medishetty
------------------------------

Original Message:
Sent: Tue January 14, 2020 09:29 AM
From: Kharlon
Subject: Multi Factor Authentication using B2B/SFG Inbound and Outbound

Emiliano thanks for the response.  We are already using multi-factor authentication for INBOUND communication via FTPS/SFTP/HTTPS protocols.  We were just curious how others using B2B/SFTP set it up.  If users are using stuff like digital certificates/SSH keys or some other method to do the 2nd form of authentication.

We actually ran a test yesterday and were able to do multi-factor authentication OUTBOUND using the SFTP protocol. 

Also does IBM have any plans to support multi-factor authentication going forward?

------------------------------
KHARLON GALBREATH
------------------------------


Original Message:
Sent: Tue January 14, 2020 02:32 AM
From: Emiliano Pacelli
Subject: Multi Factor Authentication using B2B/SFG Inbound and Outbound

Dear Kharlon, B2B/SFG on its own doesn't manage multi-factor authentication. There's a specific product born to enhance security, the IBM Secure Proxy, that can be installed and configured with it's module SEAS to grant multi-factor authentication to B2B/SFG.
Please have a look at the related documentation here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.overview.doc/seas_user_authent_and_authrzn_steps.html) and here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.fielddefs.doc/seas_ldap_auth_def.html).
Best regards

------------------------------
Emiliano Pacelli