File Transfer

 View Only
  • 1.  Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Mon January 13, 2020 11:39 AM
    Wanted to know if anyone has setup multi factor authentication for B2B/SFG?  

    We have been using it for inbound authentication but wanted to know if anyone has set this up for outbound communication.  And outside of ID/password what other forms of authentication are companies using.  We are aware of Google/Microsoft Authenticator for web access, but for other protocols such as FTPS/SFTP what are people using?

    ------------------------------
    KHARLON GALBREATH
    ------------------------------


  • 2.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Tue January 14, 2020 02:33 AM
    Dear Kharlon, B2B/SFG on its own doesn't manage multi-factor authentication. There's a specific product born to enhance security, the IBM Secure Proxy, that can be installed and configured with it's module SEAS to grant multi-factor authentication to B2B/SFG.
    Please have a look at the related documentation here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.overview.doc/seas_user_authent_and_authrzn_steps.html) and here (https://www.ibm.com/support/knowledgecenter/en/SS4T7T_6.0.0/com.ibm.help.seas.fielddefs.doc/seas_ldap_auth_def.html).
    Best regards

    ------------------------------
    Emiliano Pacelli
    ------------------------------



  • 3.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted Tue January 14, 2020 09:30 AM
    Emiliano thanks for the response.  We are already using multi-factor authentication for INBOUND communication via FTPS/SFTP/HTTPS protocols.  We were just curious how others using B2B/SFTP set it up.  If users are using stuff like digital certificates/SSH keys or some other method to do the 2nd form of authentication.

    We actually ran a test yesterday and were able to do multi-factor authentication OUTBOUND using the SFTP protocol. 

    Also does IBM have any plans to support multi-factor authentication going forward?


    ------------------------------
    KHARLON GALBREATH
    ------------------------------



  • 4.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted 16 days ago
    Hi Emiliano,

    When you mentioned that you were able to do multi-factor authentication OUTBOUND using SFTP protocol, are you referring to password & ssh key authentication from B2B Integrator?

    Regards,
    Ashwin

    ------------------------------
    Ashwin Kumar Medishetty
    ------------------------------



  • 5.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted 14 days ago
    Hi Ashwin let me highlight again the MFA for Sterling B2B Integrator needs Secure Proxy or, and maybe this is what Kharlon did, a custom java code to be executed after successful login (IUserLoginUserExit_postAuthenticateFail  user exit) that asks for an additional authentication factor.
    In case you want to leverage Secure Proxy, together with the documentation I shared 1 year ago, let me please point you to this blogpost from Vijay Chougle, our Secure Proxy Product Manager (https://community.ibm.com/community/user/supplychain/blogs/vijay-chougule/2021/02/24/multi-factor-authentication-for-ibm-sterling-b2b-c).
    Hope this help.
    Best regards
    Emiliano

    ------------------------------
    Emiliano Pacelli
    ------------------------------



  • 6.  RE: Multi Factor Authentication using B2B/SFG Inbound and Outbound

    Posted 16 days ago
    Hi Kharlon,

    When you mention you were able to do multi factor authentication Outbound using SFTP Protocol. Did you use the password and key authentication together from B2B?



    ------------------------------
    Ashwin Kumar Medishetty
    ------------------------------