Managed File Transfer

 View Only
  • 1.  Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Mon January 13, 2020 11:39 AM
    Wanted to know if anyone has setup multi factor authentication for B2B/SFG?  

    We have been using it for inbound authentication but wanted to know if anyone has set this up for outbound communication.  And outside of ID/password what other forms of authentication are companies using.  We are aware of Google/Microsoft Authenticator for web access, but for other protocols such as FTPS/SFTP what are people using?

    ------------------------------
    KHARLON GALBREATH
    ------------------------------

    #DataExchange
    #filetransfer


  • 2.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Tue January 14, 2020 02:33 AM
    Dear Kharlon, B2B/SFG on its own doesn't manage multi-factor authentication. There's a specific product born to enhance security, the IBM Secure Proxy, that can be installed and configured with it's module SEAS to grant multi-factor authentication to B2B/SFG.
    Please have a look at the related documentation here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.overview.doc/seas_user_authent_and_authrzn_steps.html) and here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.fielddefs.doc/seas_ldap_auth_def.html).
    Best regards

    ------------------------------
    Emiliano Pacelli
    ------------------------------



  • 3.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Tue January 14, 2020 09:30 AM
    Emiliano thanks for the response.  We are already using multi-factor authentication for INBOUND communication via FTPS/SFTP/HTTPS protocols.  We were just curious how others using B2B/SFTP set it up.  If users are using stuff like digital certificates/SSH keys or some other method to do the 2nd form of authentication.

    We actually ran a test yesterday and were able to do multi-factor authentication OUTBOUND using the SFTP protocol. 

    Also does IBM have any plans to support multi-factor authentication going forward?


    ------------------------------
    KHARLON GALBREATH
    ------------------------------



  • 4.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Wed January 05, 2022 01:20 PM
    Hi Emiliano,

    When you mentioned that you were able to do multi-factor authentication OUTBOUND using SFTP protocol, are you referring to password & ssh key authentication from B2B Integrator?

    Regards,
    Ashwin

    ------------------------------
    Ashwin Kumar Medishetty
    ------------------------------



  • 5.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Fri January 07, 2022 08:45 AM
    Hi Ashwin let me highlight again the MFA for Sterling B2B Integrator needs Secure Proxy or, and maybe this is what Kharlon did, a custom java code to be executed after successful login (IUserLoginUserExit_postAuthenticateFail  user exit) that asks for an additional authentication factor.
    In case you want to leverage Secure Proxy, together with the documentation I shared 1 year ago, let me please point you to this blogpost from Vijay Chougle, our Secure Proxy Product Manager (https://community.ibm.com/community/user/supplychain/blogs/vijay-chougule/2021/02/24/multi-factor-authentication-for-ibm-sterling-b2b-c).
    Hope this help.
    Best regards
    Emiliano

    ------------------------------
    Emiliano Pacelli
    ------------------------------



  • 6.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Wed January 05, 2022 01:20 PM
    Hi Kharlon,

    When you mention you were able to do multi factor authentication Outbound using SFTP Protocol. Did you use the password and key authentication together from B2B?



    ------------------------------
    Ashwin Kumar Medishetty
    ------------------------------