Reference. HelpSystems Access Authenticator

Access Authenticator uses two-factor authentication to verify user identity. This means that users must provide both their standard login credentials (username and password) and a second factor of authentication (such as a mobile device or YubiKey) to gain access to the IBM i system.

Access Authenticator supports both mobile devices (using a dedicated app) and hardware tokens like YubiKeys. Administrators can configure which authentication methods are allowed for different users or groups.

Users receive an email from their administrator with instructions and a link to the Access Authenticator User Portal. They can then register their mobile devices or YubiKeys through the User Portal.

The Desktop Agent is used for authentication when users access the IBM i system through methods other than traditional login screens, such as FTP. It provides a consistent authentication experience regardless of the access method.

Administrators have a wide range of configuration options, including defining user groups, enabling security settings, managing authentication methods, and setting up email notifications.