Hi,
I have currently Wesbphere Portal 9.5 that is authenticating using a local LDAP Server (TDS). I want to add OTP (MFA) authentication to the current login, so customer receives a SMS on his mobile device to authenticate.
I known that I can go do a connections with a external authentication provider, using SAML, and having that provider using OTP, but If possible, I would like to avoid to authentication out of my site, or using additional complex/expensive products (aka, IBM Security Access, etc).
Any sugestion about how to implement this solution ? Thks!
I do not believe the default, out-of-box Login portlet provided with Portal has the capability to send a text message for MFA. You would likely need to author a custom login portlet which implements this functionality, or extend the Portal login process to add it. Refer to the authentication filters described here for some ideas.
Configuring authentication filters
https://help.hcltechsw.com/digital-experience/8.5/admin-system/adauthflt.html
Hello @Andres Gorostidi , as @David Batres mentions the OOB login portlet does not provide any support for MFA (but you might submit an idea to request that :) ). So you'd have to do any custom development. If that's worth the effort is your or your customers decrision however imho implementing a SAML integration which provided MFA would be the preferred choice. Especially as security development is extremely critical and it is not an easy task to write secure code.
Just my 2 cents on this ...