Setting up Two-Factor Authentication - Oracle Mobile Authenticator

Oracle Authenticator is a multi-factor authentication application developed by Oracle that acts as an additional layer of security by prompting a second factor of authentication during login. Oracle mobile authenticator is available in iOS 12.0+ and Android 5.0+. You can install Oracle Authenticator on your smartphone or tablet devices. The second level of authentication is a one-time password generated by the Oracle authenticator with a 6-digit number. Click here for Oracle Authenticator installation instructions and more.

Connecting to the PAM360 Web Interface with Oracle Authenticator as TFA

As explained here, for the TFA-enabled users, the first level of authentication will be through the usual authentication, i.e., the users have to authenticate through PAM360's local authentication or Active Directory/Microsoft Entra ID/LDAP authentication. Perform the below steps to connect the PAM360 web interface with Oracle Authenticator as TFA:

1. On the PAM360 login page, proceed with the first level of authentication and click Login.
   
2. Now, PAM360 will prompt you to associate the authenticator with your PAM360 account. Follow the below steps to associate the Oracle Authenticator with your PAM360 account:
   1. Launch the Oracle Authenticator application on your mobile device/tablet.
   2. Tap the + button or select Add Account.
      
   3. Then, point your device to the QR code shown in the PAM360 GUI to scan the QR code to add the account. This will automatically configure the Oracle Mobile Authenticator and start generating authentication codes for PAM360.
   4. Enter the current token for second factor authentication in the text box to log in to PAM360.
3. If you have trouble scanning the QR code, the automatic setup will not work. So, perform the below steps for the manual setup:
   1. Click the text I have trouble scanning this QR code! present below the QR code in the PAM360 GUI.
   2. From the Oracle authenticator application, tap the + button or click Add Account.
   3. Tap the Enter key manually and select the Account Type as Others.
   4. Enter the Account name and the Key and click Save. The Key is the alphanumeric key shown in the PAM360 GUI.
      
4. Oracle Mobile Authenticator is now configured and will start generating the authentication codes periodically. Enter the current generated code to continue logging into PAM360.