- Creating and working with rules.
The Add Rule wizard allows you to easily configure rules for authenticating different types of access. Rules created using the wizard use a RADIUS server for authentication.
- Easy access to Emergency mode operations.
Emergency mode allows an IBM i Security Administrator to respond to an emergency by allowing Assure MFA to automatically override authentication action to either deny or allow user access. Access to self-service features are also overridden by the emergency mode setting. You must be an Assure Security administrator to access this functionality.
- Viewing and working with the MFA log.
- Access to web listener sign on screen.
The web listener must be configured before this action is available.
Differences between web and 5250 interfaces
Adding and changing rules is significantly simpler from the web UI.The Add Rules wizard supports creating rules for several categories of authentication environments using a combination of default values and values you select. The concept of category is unique to the web UI.
- Rules created using the wizard use a RADIUS server for authentication.
When adding rules using the wizard, you will see only the fields of a rule definition for which you must select or specify a value. The rule for the selected category will use values appropriate for the category that are based on a template rule.
When editing a rule (Details action), some fields may be grayed out and not available to edit from the web UI. All fields of a rule definition can be edited from the 5250 UI.
Rule Status: The web UI uses the terms Enabled and Disabled as the equivalent to the Held (with values of N or Y, respectively) field in the 5250 UI.
- MFA Profile is the web UI term for the field named Registered profile in the 5250 UI.
Within rules in the web UI, the User field value "Use Distribution List" is known as a Destination within the 5250 UI.
Field values in the web UI have descriptive textual names. Use online help for the field descriptions to see the correlation to the 5250 UI values.
When displaying the MFA log, the web UI uses the term RADIUS Profile for the same information as the Auth. ID column in the 5250 UI.