Previous TopicNext Topic

RSA SecurID

Once RSA SecurID verification is enabled, users can use the security codes generated by the RSA SecurID mobile app or hardware tokens or tokens received in their email or mobile to authenticate themselves.

Prerequisite Steps :

Integrating RSA SecurID with ADSelfService Plus

1. Log in to your RSA admin console (e.g., https://adssp-rsa.mydomain.com/sc).
2. Go to Access tab. Under Authentication Agents, Click Add New.
3. Add ADSelfService Plus Server as an Authentication agent and click Save.
4. Go to Access. Under Authentication Agents, Click Generate Configuration File.
5. Download AM_Config.zip (Authentication Manager configuration ).
6. Extract sdconf.rec file and the SecurID file from the ZIP to the bin folder in the <ADSelfService Plus_install_dir\bin folder.
7. Ensure that the authapi.jar file, and its corresponding Log4j JAR files are present under the <install_dir>\lib folder in the installation directory. If not, download the authapi.jar file and its corresponding Log4j JAR files, preferably the latest version. Paste these files in the <ADSelfService Plus_install_dir>\lib folder.

Configuring ADSelfService Plus for RSA SecurID

1. Log in to ADSelfService Plus with admin credentials. Navigate to Configuration → Self-Service → Multi-factor Authentication → Authenticators Setup.
2. From the Choose the Policy drop-down, select a policy.

   Note: ADSelfService Plus allows you to create OU and group-based policies. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy. Click Select OUs/Groups, and make the selection based on your requirements. You need to select at least one self-service feature. Finally, click Save Policy.

3. Click RSA SecurID section.
4. Click Enable RSA SecurID.

Previous TopicNext Topic