In an SSO Agent deployment, you can configure a user application portal to help users find and access protected applications. The portal provides links to available applications and helps handle user authorization required to access those applications. Users can sign in to the portal if they are synchronized with the Cloud Authentication Service and are enabled. Users can only see those applications they are authorized to use. Access policies determine which applications users can access. You can optionally configure the Portal Multifactor Authentication Policy if you require users to provide step-up authentication during signing in to the portal.
The RSA SecurID Access Application Portal is provided out-of-the-box and is a web application that runs on the identity router and needs very little configuration to set up. The RSA SecurID Access Application Portal provides basic functionality, but does not support extensive customization.
A custom portal can be developed to create your own portal experience for web application users, or to integrate single sign-on (SSO) applications with an existing user portal that is already deployed within your company. Web developers create the custom portal using common scripting languages (for example .php or .jsp). The RSA SecurID Access Custom Portal Web Developer's Guide is provided to help you get started.
At least one application must be configured for SSO, added to My Applications in the Cloud Administration Console, and published before users can sign into the application portal. All user interactions with either portal type are passed to the identity router which also handles authorization to the application.
For configuration instructions, see: