User Authentication
After you have registered a YubiKey or mobile device, you are ready to authenticate.
Authenticating an Interactive IBM i Sign On
- Sign on to the IBM i system your administrator has configured with Access Authenticator. When you do, a screen with one or more of the possible authentication methods appears:
- Enter 1 next to the authentication method you would like to use, and do the following to authenticate:
- For One-Time Password (OTP), open the mobile app and enter the six-digit number from your mobile device into the IBM i prompt, then press Enter.
- For Mobile Push Notification, open the notification using the Access Authenticator mobile app and tap Accept.
- For Biometrics (Mobile Fingerprint Scan), open the notification using the Access Authenticator mobile app and tap Accept, then scan your fingerprint.
- For Printed list of backup OTPs, enter a valid six-digit password, then press Enter.
- For YubiKey ID, insert the YubiKey and press (short press) the YubiKey button.
- If authentication is successful, you are allowed to sign on.
NOTE: See Troubleshooting Authentication with your Mobile Device if you have difficulties authenticating with your mobile device.
Authenticating an FTP IBM i Sign On
If you are signing on using an Exit Point, like FTP, the Access Authenticator Desktop Agent must be installed and running (See User Setup).
- Connect to the IBM i via FTP and sign on.
- The Access Authenticator Desktop Agent appears on your Windows workstation.
- To allow the connection, click Allow. For Device, click the drop-down arrow and select the device you will use to authenticate. You are presented with one or more authentication options. Use one of the following methods to authenticate:
- Click One-Time Password (OTP), then open the Access Authenticator mobile app. Enter the six-digit number from your mobile device into the Desktop Agent, then press Enter or click Submit.
- Click Push Notification, the open the notification using the Access Authenticator mobile app and tap Accept.
- Click Mobile Biometrics, then open the notification using the Access Authenticator mobile app and tap Accept, then scan your fingerprint.
- For YubiKey ID, click Not ready. Click here. if shown. Insert the YubiKey and press (short press) the YubiKey button.
- For Printed list of backup OTPs, enter a valid six-digit password, then press Enter (or click Submit).
- If authentication is successful, you are granted access.
NOTE: If you do not see the above screen, click the arrow in the upper right corner of the Desktop Agent window:


NOTE: See Troubleshooting Authentication with your Mobile Device if you have difficulties authenticating with your mobile device.