000021977 - Is RSA SecurID case sensitive?

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000021977
Applies ToRSA ACE/Server 5.1 (no longer supported as of 7-14-2006)
RSA ACE/Server 5.2
RSA Authentication Manager 6.0
RSA Authentication Manager 6.1
IssueIs RSA SecurID case sensitive?
Does ACE/Server enforce case sensitivity?
ResolutionAt this time, ACE/Server does not enforce case sensitivity. For instance, JOHN DOE is the same default login as John Doe. Even JoHn dOe would be considered the same user to the Primary/Replica Authentication Servers.

NOTE: We will return the default login credential to a device as it appears in our database.
NotesWeb Express / Deployment Manager recognizes case for all fields except Q & A Authentication fields. For example, if you enter "jdoe" as your User ID to request a token, Web Express stores "jdoe" in lowercase in the Web Express database. If the database you use as your Web Express database is case sensitive, subsequently entering "JDOE" as the User ID to perform another Web Express task (for example, to activate your token), causes the task to fail. Therefore, RSA recommends matching the case of the data across all Web Express / Deployment Manager pages.
Legacy Article IDa22807