An ONTAP locally administered administrator or domain account with chained primary and secondary authentication methods of password and publickey, or nsswitch and publickey. Time-based-one-time passwo...An ONTAP locally administered administrator or domain account with chained primary and secondary authentication methods of password and publickey, or nsswitch and publickey. Time-based-one-time password (TOTP) is a temporary passcode generated by an algorithm that uses the current time of day as one of its authentication factors. SAML 2.0 where ONTAP System Manager or AIQUM are the service provider role to support Cisco DUO starting in ONTAP 9.12.1.