Are there some way to activate the Second Authetnication Factor in ELM 7.0.
One answer
This would be done inside MS AD, not ELM and you'll need to delegate the authentication job to AD.
There's an 'automatic' way to set this up and a manual way. If you install the Jazz Authorisation Server, then you can use that to quickly set up SSO via the MS AD SAML IdP, which will delegate the sign in to AD. See the wiki for details:
The alternative is to manually configure Liberty to do SSO via SAML, but be aware that this is a Liberty specific thing and not necessarily covered by IBM ELM Support: