Logging On to Different Systems with One-Time Passwords

You can log on to systems that require one-time password authentication with passcodes generated by an authenticator mobile application in a number of different ways:

Log on to systems using Secure Login Client
Log on to systems using SAML, using Application Server Java as an identity provider (IdP)
Log on to web applications running on SAP NetWeaver AS for Java

Depending on the administrator's configuration, you need to provide passcodes either for single-factor authentication or for two-factor authentication. The following options are available:

Single-factor authentication is required.

You log on to applications with a single factor, either a passcode or another credential. This option can also be configured to require two passcodes for higher security.
Two-factor authentication is required.

You can log on to a system with two means of identification: a user name and a passcode, and another factor for authentication (for example, a corporate password, X.509 certificate or others). This option can be configured to require a single factor after the first successful logon.
The required factors are determined at runtime.

An application can decide dynamically whether to require a single factor or two factors of authentication.