MFA Settings for Persons

To specify which users require Multi Factor Authentication, select 3. MFA Setting for Persons from the main Multi Factor Authentication (MFA) menu. The MFA Setting for Persons screen appears.

​                           ​ MFA Setting for Persons​                             
                                                                                
​ Type options, press Enter.​                              ​ Position:​ ​           ​ 
 ​ 1=Select​ ​ 3=Copy​ ​ 4=Delete​ ​ 5=Use MFA​ ​ 6=No MFA​ ​ 7=Users​ ​ 8=IP-Group​          
                                                                                
     ​ Using MFA ​           ​ Sign-​ FTPSRV/​ FTP  ​ TCP​   ​ ODBC​ ​ File​  ​ Remote​ DDM​  
                           ​ On​   ​ REXEC  ​ Clnt​ ​ Signon​      ​ Server​ PgmCmd​ DRDA​ 
​ Opt​ ​ Person​    ​ IP-Group​  ​ InOut​ InOut​  ​ InOut​ InOut​ ​ InOut​ InOut​ ​ InOut​ ​ InOut
​ ​  ​  ​ ALEXM     ​           ​ ​ M​ M​   ​ M​ M​   ​ M​ M​  ​  ​  ​   ​  ​  ​  ​ M​ M​   ​  ​  ​   ​  ​  ​ 
 ​  ​  ​ A123      ​           ​ ​  ​  ​   ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​   ​  ​  ​ 
 ​  ​  ​ B12       ​           ​ ​ M​ M​   ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​   ​  ​  ​ 
 ​  ​  ​ DB        ​ TEST      ​ ​  ​  ​   ​  ​  ​   ​ M​ M​  ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​   ​  ​  ​ 
 ​  ​  ​ GS        ​           ​ ​  ​  ​   ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​   ​  ​  ​ 
 ​  ​  ​ JAVA      ​           ​ ​  ​  ​   ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​   ​  ​  ​ 
 ​  ​  ​ JAVIER    ​           ​ ​ M​ M​   ​ M​ M​   ​ M​ M​  ​ M​ M​   ​ M​ M​  ​ M​ M​   ​ M​ M​   ​ M​ M​ 
 ​  ​  ​ KOBI      ​           ​ ​  ​  ​   ​  ​  ​   ​ M​ M​  ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​   ​  ​  ​ 
 ​  ​  ​ MARY      ​ SETS      ​ ​ M​ M​   ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​   ​  ​  ​ 
 ​  ​  ​ OD        ​           ​ ​  ​  ​   ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​  ​  ​  ​   ​  ​  ​   ​  ​  ​ 
                                                                  ​      More...​ 
​ InOut . : Inside/Outside IP-Group​                                              
​ Encoding: blank=No MFA, M=Use MFA, R=Reject​                                    
                                                                                
​ F3=Exit​  ​ F6=Add new​  ​ F12=Cancel​                                              
​                                                                                
​

The body of the screen only contains lines for persons for whom MFA settings have already been created. Person who have Password Reset settings but not MFA do not appear.

Each of these lines shows the Person name for that person, the IP-Group to which the person belongs, and the person's settings for each of several access services for the person. The settings for the services include two columns: an In column for accesses from within the persons's IP Group and an Out column for accesses from outside it.

The In and Out column for each service in each row indicates whether MFA allows access with or without authentication or rejects the access. Possible values are:

M: Require authentication.
R: Reject the access.
blank: Allow access without authentication.

To add a new person to the list of users, press the F6 key. The Add MFA Setting for Person screen appears, as shown in Adding or Modifying MFA Settings for Persons.

To modify a person's MFA settings, enter 1 in the Opt field for that person. The Modify MFA Setting for Users screen appears, as shown in Adding or Modifying MFA Settings for Persons.

To delete a person from the list of users, enter 4 in the Opt field for that person. The Delete MFA Setting for Persons screen appears. Press Enter to delete the persons or the F12 key to cancel.

To display the users for a person, enter 7 in the Opt field for the person. The Users of a Person window appears, showing, for each user, the System for the user, the User name, and whether the person Exists on that system.

To display the definition of a person's IP Group, if one is shown in the person's IP-Group field, enter 8 in the Opt field for the person. The IP-Group window appears, showing the IP Group definitions.