Re: Mainframe Multi factor authentication possibilities

2020-08-26 Thread Timothy Sipples
Jared Hunter wrote: >The goal of multi-factor authentication is to strengthen the link >between a human being and the actions taken by a logical account >(because a logical account is what the SAF-implementing ESM is >capable of authorizing and auditing). Sharing a single (or few) >logical account

Re: Mainframe Multi factor authentication possibilities

2020-08-26 Thread Jared Hunter
ug 2020 11:16:09 +0400 From: Jake Anderson Subject: Mainframe Multi factor authentication possibilities Hello, Cross posted. We are planning to implement 2FA for mainframe logons. Here we have a challenge where we use a common mainframe ID and would like to know if there is a way to enforce 2FA

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Timothy Sipples
The first factor doesn't seem like it'd help distinguish between users since you're sharing it. What type of second factor(s) do you plan to use? - - - - - - - - - - Timothy Sipples I.T. Architect Executive Digital Asset & Other Industry Solutions IBM Z & LinuxONE - - - - - - - - - - E-Mail: sipp

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Mike Schwab
Yes, you have the chance of a breakin. But they have to have the user id and password before the confirmation code goes out. And when the cell phone number is transferred to a replacement phone or when the employee supplies the new cell phone number the vulnerability ends. On Tue, Aug 25, 2020 a

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Christian Svensson
Hi, Now, I have not written any RACF exits ever, but a project[1] I am part of has just been open-sourced that solves generating one-time codes from a central server. The way it works on Linux is that when you enter your username in the prompt instead of the classical "Password: " prompt you get a

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Paul Gilmartin
On Tue, 25 Aug 2020 13:08:17 -0500, Mike Schwab wrote: >SMTP. Email to phonenum...@carrier.com >https://www.wikihow.com/Email-to-a-Cell-Phone > It may not be so simple. The link above takes me ultimately to a service selling background information (for a previous owner of my phone number.) But

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Mike Schwab
SMTP. Email to phonenum...@carrier.com https://www.wikihow.com/Email-to-a-Cell-Phone On Tue, Aug 25, 2020 at 10:42 AM Paul Gilmartin <000433f07816-dmarc-requ...@listserv.ua.edu> wrote: > > On Tue, 25 Aug 2020 08:50:34 -0500, Mike Schwab wrote: > > >Text a six digit number to a list of cell ph

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Paul Gilmartin
On Tue, 25 Aug 2020 11:01:40 -0500, Joe Monk wrote: >I dont understand how this is supposed to work. 2FA is for ONE user. If you >have many users using one common userid, the system should invalidate any >other user logged on with that. same userid and a different 2FA. > Require each user to obtai

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Jake Anderson
Initial layer to have a biometric after it validates the Mainframe logon should be allowed On Tue, 25 Aug, 2020, 8:02 pm Joe Monk, wrote: > I dont understand how this is supposed to work. 2FA is for ONE user. If you > have many users using one common userid, the system should invalidate any > ot

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Joe Monk
I dont understand how this is supposed to work. 2FA is for ONE user. If you have many users using one common userid, the system should invalidate any other user logged on with that. same userid and a different 2FA. Joe On Tue, Aug 25, 2020 at 10:42 AM Paul Gilmartin < 000433f07816-dmarc-requ.

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Paul Gilmartin
On Tue, 25 Aug 2020 08:50:34 -0500, Mike Schwab wrote: >Text a six digit number to a list of cell phone numbers? Add the >number to the cell phone number so subtracting the six digit number >gives you the last 6 digits of the person's cell phone number? > Is there an app for that? -- gil -

Re: Mainframe Multi factor authentication possibilities

2020-08-25 Thread Mike Schwab
Text a six digit number to a list of cell phone numbers? Add the number to the cell phone number so subtracting the six digit number gives you the last 6 digits of the person's cell phone number? On Tue, Aug 25, 2020 at 2:16 AM Jake Anderson wrote: > > Hello, > > Cross posted. > > We are plannin

Mainframe Multi factor authentication possibilities

2020-08-25 Thread Jake Anderson
Hello, Cross posted. We are planning to implement 2FA for mainframe logons. Here we have a challenge where we use a common mainframe ID and would like to know if there is a way to enforce 2FA which can identify a person based on fingerprint or any other mechanism which can identify a person even