Second factor authentication via mail

hello
I would like to know whether it is possible with NW SSO to send an automated mail with a randomly generated code as part of the 2 factor authentication scheme
thanks in advance and best regards
Michele

Hello Michele,
The solution is available as part of the two-factor authentication with OTP (SAP Single Sign-On 2.0) and requires an access policy development. See more details about access policies as part of the SAP Single Sign-On 2.0 here:Access Policies Implementation Guide - SAP Library
Best regards,
Donka Dimtirova

Similar Messages

  • Apple mail and google 2 factor authentication

    I am using 2 factor authentication to connect with gmail. I receive messages without a problem, but when I try to send mail I frequently get a cannot connect error asking for the password to be re-entered. I will then get a new application specific password for gmail and replace the SMTP password. That will work for a day or two, but then it will again fail for sending messages.
    Does anyone know if there are particular problems using 2 factor authentication with gmail and OSX mountain lion mail> Am I missing some setting?
    thanks for any insights.

    I had looked there several times - and it didn't specifically discuss 2 factor authentication - that is why I posted my question. I had followed instructions and continued with problems.
    Yesterday there was a Macworld article posted online about gmail imap. One thing mentioned in the article that is in addition to what is on the google site is that under system preferences there is a mail contacts panel where the gmail password can also be entered.
    I generated a new app specific password and entered it in all three places (sys pref panel, imap server, and smtp server.)
    At this time that seems to be working.
    Will have to see if it sticks.
    Google also had a help item suggesting that if the ask for password dialog pops up when attempting to send mail then get a new app specific password and enter it into that box.
    Hopefully the issue is resolved. will give it a few days to be sure.
    Thanks

  • Web Mail Two Factor Authentication

    Does Verizon offer web mail two factor authentication/verification? why yes, then need setup information. If no, then why not?

    Det_Titan wrote:
    Does Verizon offer web mail two factor authentication/verification? why yes, then need setup information. If no, then why not?
    No. As for why, you'll have to ask them. Options on their Contact Us page.
    If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.
    "All knowledge is worth having."

  • Multi-factor Authentication?

    Multi-factor authentication will soon be mandatory for
    several of my applications. I need to know if CF has any built-in
    functionality, either stock or via custom tags, to handle any of
    the common multi-factor tools. How are other people handling this?
    :-)

    Huh, i'm sorry, I found the answer just after the questioning... :)
    Known Issues:
    * Windows Authentication for Terminal Services is still not supported for
    Windows Server 2012 R2From:https://pfweb.phonefactor.net/install/6.3.0.17465/release_notes.txt
    www.sccmfaq.ch

  • Can't send e-mails via Mail with a Gmail e-mail address using Sky internet

    Can anyone help? My brother has an iBook G4 Mac OS X 4.1 and is trying to send e-mails via Mail with a Googlemail e-mail account. He is using Sky for his broadband. I assume it has something to do with his outgoing smtp e-mail Preferences in Mail, but for the life of me I can't figure it out. He can receive e-mails OK, its just that when he tries to send he gets the 'server can't send error'. Any ideas?

    Here's my gMail IMAP SMTP settings...
    smtp.gmail.com
    Port 25
    Authentication: Password
    SSL
    Sky may require another port to pass through...
    IMAP is port 143
    IMAP-SSL is port 993
    POP is port 110
    POP-SSL is port 995
    SMTP and SMTP-SSL is on ports 25, 587 and 465. Port 587 has to be SSL, and port 465 is enforced TLS-wrapped and is generally used by Outlook users.

  • This is regarding CBMA in SAP PI 7.3.1. I have set up the alert mail using default java mail client.I do receive the alerts via mail. But my requirement is to direct all the mails to Business workplace inbox in ECC.

    This is regarding CBMA in single stack SAP PI 7.3.1. I have set up the alert mail using default java mail client.I do receive the alerts via mail. But my requirement is to direct all the alert mails to Business workplace inbox in ECC.
    So I need to set up PI to redirect mails to ECC Business workplace user inbox (sbwp). From here rules are set up & routed per distribution list.
    Please guide me how I can achieve this requirement.

    Hi,
    yes, it is a little bit different. This is the issue.....  
    But I am not sure if your links will help:
    1) /people/william.li/blog/2008/02/13/sap-pi-71-mapping-enhancements-series-using-graphical-variable
    is about a different solution. I do not need to count the number of lines of the source message.
    And the second variable is about concat line by line from unbound node to unbound node.
    My issue is:
    Souce:
    Message line (0...unbound) ! ! ! ! ! ! ! !
    .    ResultLine   (1..1)
    Mapping:
    =>   ResultLine1
           ResultLine2
           ResultLine........          => into UDF to an element  (1..1) in one mapping operation.
    So that all "ResultLine"s are included.
    The result is explained in the given link for Mail attachment with UDF.
    So I am not sure how to use this thread for my issue.
    In the comments of that blog Christoph Gerber writes that the new variable feature can only handle single values.
    So it is not suitable for my purposes as I have a list of values here that needs to be moved into the target message field.
    2) http://wiki.sdn.sap.com/wiki/display/Java/UsingEditJavaSectioninMessageMapping
    shows where to find the button "Java section" which is not available here in 7.1
    3) /people/sap.user72/blog/2005/10/01/xi-new-features-in-sp14
    too is about the nice little button for Java Section that is no longer existing on PI 7.1 screen for mappings.  
    So my issue is: How to replace the Java section function with global variables in PI 7.1?
    Best regards
    Dirk

  • Having trouble with Google 2 factor authentication and Mac Calendar

    Hello!  I recently started using Google 2-factor authentication on my Google Apps (Pro) account, and have successfully configured my gmail settings in OS X Mail so that inbound/outbound work correctly.  Here's where the problem is:  OS X uses a single password in the system account settings for calendar/contacts/notes, etc, so enter the login/password once and check the boxes for what services you want to use. But Google sees these as distinctly different apps, so when I enter an app-specific password, it only registers for one (i.e.:  contacts), but not for another or the rest of them (like calendar).  Has anyone had experience in setting this up? How can you get app-specific passwords to work with the rest of the OS X system applications besides mail?
    Thank you!

    Unfortunately, I already tried this several times prior to posting here.  The system won't let me add the same account more than once, and continues to prompt me for a password multiple times for each service.

  • I have been with Verizon since 1995 (I was an employee for years). I attempted to upgrade 2 of the 4 lines on our account today, but couldn't. We have an outstanding balance (though we have received no past due notice via mail, email, or text and make reg

    I have been with Verizon since 1995 (I was an employee for years). I attempted to upgrade 2 of the 4 lines on our account today, but couldn't. We have an outstanding balance (though we have received no past due notice via mail, email, or text and make regular payments every month) that I would love to pay, but our bank account number was stolen, so we can't access our account until Monday. Because we were unable to pay our outstanding balance, we were told we can't order the phones today during the special promotion (that ends today). No one can help us, though we have no way of doing anything until Monday when our bank reopens and can reimburse us for the money that was stolen from us. No one in customer service can help us (they can't process the order but not ship until after we make payment on Monday, they won't honor today's promotion on Monday due to our special circumstance, nothing). They stated that "corporate" makes the rules and they have no idea how I can reach corporate to discuss the matter. Without the promotion, we will be charged full price for the phones on Monday, which will cost us an additional $300.00. Any help would be appreciated. Thanks.

    I hope that you aren't complaining about dropped calls INSIDE your condo because no amount of switching or upgrading devices will solve that.
    VZW will not guarantee service inside of any structure. There are just too many factors. If the problem is inside then you might want to look at one of the following:
    1.) Network Extender (may cause issues for others in a condo or apartment style setting)
    2.) A Google Voice Number (Free with a Gmail email address), downloading Google Hangouts Dialer and forwarding your calls to the GVN so that you can make and receive calls over Wi-Fi.

  • Does anyone know how to change where incoming (via mail) calendar requests go on my MacBook? Mine insist on going to Entourage, which I don't use any more. I've tried setting the default calendar in iCal preferences. Doesn't help. Bugs me. Can you help?

    Does anyone know how to change where incoming (via mail) calendar requests go on my MacBook? Mine insist on going to Entourage, which I don't use any more. I've tried setting the default calendar in iCal preferences. Doesn't help. Bugs me. Can you help?

    Jneklason wrote:
    ~snip~
    I know this email is confusing and really hard to understand...perhaps now you will know how i've been feeling--lost and confused with all the mis-information, with a hit and miss phone, and out of time with all the 1 1/2 hr to 2 hrs EACH wasted on this issue.
    On top of all this, I can't even find out how to file a complaint with anyone higher up than Customer Service.
    I hate to tell you this, but you didn't write an email. You wrote a discussion post on the Verizon Wireless Community forum which is a public peer to peer forum. Unfortunately since you didn't mark your post as a question, the VZW reps that roam this community won't ever see your post. Before you re-post it, don't. Duplicate posts get removed from the community.
    I see there were several missteps both by the reps and yourself in your post. First you should have insisted on returning the phone within the 14 day return policy period. Second which Samsung Galaxy mini model did you purchase? The S3 mini or the S4 mini? Did you do any research prior to deciding on this device. The reps at that time deflected the easiest course of action, by trying to get you to replace the phone under insurance instead of returning the phone. The Early Edge payment option requires the current phone on the line using the early Edge must be returned to Verizon Wireless. Did you once considered going to a third party site like Swappa to purchase a gently used device for your daughter?

  • 2 Factor Authentication for Anyconnect VPN using ISE

    We are planning to implement dual factor authentication for Anyconnect VPN.
    The end users will be authenticated using domain name in machine certificates and username password with
    ISE used as radius server.
    We have the following approaches to achieve this :-
    1. Use primary and secondary authentication with user credentials as primary authentication
    and CN field of the certificate as secondary authentication.However this option prompts users for password for
    both the fields while we want the machine certificate to authenticate itself without a password.
    2. Second approach is to authenticate using user credentials and authorize the user to access the network if
    the machine certificate has a domain name in CN field which we are able to validate from the AD using
    Dynamic Access Policy.
    We are looking forward for discussions on the above approaches and are open to any other
    solution.

    Hi Umahar,
    Not sure I understood correct. You would like to authenticate the user using machine certificate for anyconnect and want to extract CN attribute the client's certificate and send it to the ISE server for further authenticate with AD. And also you don't want an additional password prompt to be produced to the user.
    If my understanding is correct. Then user would get a prompt for the password atleast because in the machine certificate there won't be password, but to authenticate with RADIUS/TACACS , we need both username and password. So how will the user gets authenticated without password.
    If you are looking a way to just see if the user is present under AD, not exactly and authentication then this might not be possible.

  • 2 factor authentication avail in Canada?

    Two weeks ago I started the process of using 2 factor authentication on my AppleID. Today I received an email saying that the waiting period is over and I can proceed. According to this http://support.apple.com/kb/HT5570 page I should see 2 factor authentication under Password and Security page. Well I do not see anything re 2 factor authentication. Apparently that happens when
    " When your country is added, two-step verification will automatically appear in the Password and Security section of Manage My Apple ID when you sign in to My Apple ID"
    In other words it appears that 2 factor authentication is not available to Canada.  Sigh if this is the case then why allow me to initiate the process and then email me to tell me its available when its not???

    I have a couple of AppleIDs. Both have Cdn addresses registered.
    One started life as a mac.com account. It got converted to an AppleID when mac.com folded years ago.  It don't use it much. That account has the two-factor authorization available. i haven't enabled the feature, but it is available to me on the Password and Security page.
    The second is my primary AppleID account. Two-factor authorization option  is not visible on that account.
    The lack of 2Factor on Canadian accounts has nothing to do with difficulties in dealing with the wireless carriers or SMS aggregators, as suggested by mjdl above. It's purely an Apple administrative issue.

  • Google 2 factor authentication and youtube sign in

    I recently enabled google's 2 factor authentication and now can't view my youtube content/subscriptions via apple tv, presumably because of this. The account password has remained the same.
    Is there a means to get around this?
    Thanks.
    (apple tv software is current)

    Unfortunately, I already tried this several times prior to posting here.  The system won't let me add the same account more than once, and continues to prompt me for a password multiple times for each service.

  • Can you use Multi Factor Authentication server with Central NPS and RD Gateway?

    Hi,
    Does anyone have any experience getting the Azure Multi-Factor Authentication (MFA) on-premise server, working with a Remote Desktop Gateway server, and a centralised NPS server?  I can get a solution whereby a user can get the second token (phone call/sms
    etc.) but the connection never gets established.  It looks like its looping as it repeats the phone call/text for a second time but again no connection.  I can’t figure out why.
    All the blogs are very vague as to whether you can combine a new MFA NPS connection policy with an existing username/group membership NPS policy on a centralised NPS server (with RAP/CAP policies).
    I need to understand whether we can combine both an MFA Radius policy with a Username/Password plus group membership NPS policy together to achieve two factor authentication.
    Do you have the Remote Desktop Gateway Server connect to the Central NPS server and then the NPS server use the MFA server as its proxy server? In effect turning the NPS server into a proxy Radius server?  
    Or do you configure the Remote Desktop Gateway server to use the MFA server as the proxy Radius server, and configure the MFA server to send on Radius requests to the central NPS server?
    Or either of these scenarios not supported and you can only use the MFA server as the only Radius server in the auth. process? (bypassing NPS policies?)
    Thanks if someone can assist,
    I’ve been using these blogs but to no successful effect:
    http://technet.microsoft.com/en-us/library/dn394287.aspx
    http://www.rdsgurus.com/uncategorized/step-by-step-using-windows-server-2012-r2-rd-gateway-with-azure-multifactor-authentication/
    http://dave.harris.uno/installing-and-configuring-azure-multi-factor-authentication-mfa/

    Hi Michael,
    Thank you for posting in Windows Server Forum.
    After going through your description, I can say that we can use MFA server with central NPS and RD Gateway. Also the link which you have provided points the step to apply. In addition you can refer below article.
    Configure Remote Desktop Gateway to use Multi-Factor AuthenticationConfigure Remote Desktop Gateway to use Multi-Factor Authentication 
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    TechNet Community Support

  • I don't get SMS messages with the code from Apple with two factor authentication

    As soon as Apple enabled two factor authentication in Mexico, I activated the feature. For some time everything worked well. When iOS 8 was launched, I started updating my devices. I was able to update an iPad Air as well as my iPhone 5 (which is the device used for verification). However, when I tried to update my iPad mini, I couldn't. I stopped receiving SMS messages from Apple with the code for verification. Now I am stuck with an iPad mini that I cannot use with my Apple ID and I cannot use iCloud on my brand new iPhone 6 (anticipating the problem, I backed up my iPhone 5 with iTunes and I am up and running, but with no iTunes match and no iCloud backup).
    I have spent time on the phone with Apple support, who promised to return my call with a solution, but they never called back.
    Just a final note. I do not have the recovery key. I trusted Apple and never thought I would need it. The fact is I still think it is Apple's problem because the SMS messages should get to my phone, and they don't. I do not really care losing my iCloud Backups or my photos (I have them all backed up elsewhere) but I don't want to lose my e-mail address (a .mac domain) nor my purchases.

    I sent a message to that person. He replied, but I didn't get anything. To make it even more puzzling, I asked him to cc to my wife and she got his message. Then I asked her to forward it to me, and again I didn't get anything. Next, I  found an old message from that guy and forwarded it to myself. Same effect - the message disappears, although the "sent" folder has a copy!

  • Vmware horizon radius integration with two factor authentication

    -1 down vote  favorite
    I have deployed vmware horizon view connection server (Evaluation/Trial version), i want to integrate it with two factor authentication server. But after configuring RADIUS parameters in admin portal of connection server, it’s not allowing me to save the settings. Please suggest.
    I have attached the snap for your reference.

    The SMTP server supports what is referred to as third party authentication. To take advantage of this you would need to provide all of the authentication code, however -- there's no way to do part of the authentication and then pass control back to the messaging server for the rest. So you'd need to do both password checks, one of which is presumably done via LDAP auth, yourself.
    As far as LDAP proxy and RADIUS, we use a standard LDAP simple bind. The ODSEE LDAP proxy is often used in OCMS deployments, so that is a known good solution. We don't directly support RADIUS; the aforementioned third party authentication could be used to tie into such a system.
    - Jeff

Maybe you are looking for