The following SY parameters govern two-factor authentication:
SY/AUTH2EXP - 2 Factor Authentication Expiry
The number of seconds that a two-factor authentication passcode will remain active. If omitted then 60 is assumed.
Clients should configure this to align with their corporate standards for passwords.
SY/AUTH2IPS - 2 Factor Authentication IP List
The range of IP addresses that will be included for two-factor authentication. Access from this range will be made to authenticate with a passcode. If this is set to * then all logins will require it. If blank (default) then two-factor authentication will not be used.
COINS recommends setting this to * to require all accounts to be authenticated via two-factor authentication.
SY/AUTH2KEY - 2 Factor Authentication Code Length
The length of the two-factor authentication passcode key (default is 6, maximum is 9).
Clients should configure this to align with their corporate standards for passwords.
SY/AUTH2SMS - 2 Factor Authentication SMS
Whether to use SMS as the primary method for two-factor authentication (Y or N).
If set to Y then a suitable SMS plan will be required and the notification of passcode will be sent via SMS. If a user does not have a mobile phone number defined then email will be used. If the user does not have an email address or mobile phone number then they will not be able to gain access.