Two-factor authentication (2FA) is a security mechanism that requires users to provide two pieces of evidence to prove their identity before accessing a system. ONTAP supports two methods of 2FA: public key and SAML. Public key authentication uses a pair of cryptographic keys (one public and one private) to verify the user’s identity. SAML authentication uses a web-based protocol that allows users to log in to an application by using a secure identity provider (IdP). Both methods are required to set up 2FA for the ONTAP CLI. IPsec and password are not2FA methods, as they only provide one factor of authentication. References :- Set up multifactor authentication, TR-4647: Multifactor Authentication in ONTAP