|Applies To||RSA Product Set: SecurID Access|
RSA Product/Service Type: Cloud and Identity Router, Cloud Authentication Service
|Issue||The RSA SecurID Access Cloud Authentication Service is a partly SaaS and partly on premise product, so installation and configuration does not follow a traditional software path. This article provides information and references to help you through the initial deployment of the service.|
|Tasks||These steps will guide you through the initial deployment process, including provisioning, planning, initial credentials, downloads, installation and configuration.|
Setup and configuration steps
- Initial setup of the Cloud Authentication Service will begin when RSA provisions your deployment in either an EMEA- or Americas- based Microsoft Azure cloud. This will normally be triggered to occur when RSA processes your sales order.
- Deployment planning can start at any time and can continue while RSA provisions your new cloud deployment. The two main planning steps are:
- Read the RSA SecurID Access Cloud Authentication Service Planning Guide. This will help you to select the first product feature and architectural option that will be used. The options, subject to your RSA SecurID Access License, are:
- Relying Party (Service Provider)
- SSO Agent
- Single Identity Router.
- Single Identity Router plus a standby Identity Router
- High availability Identity Router architecture
- High availability Identity Router architecture and a single standby Identity Router
- High availability Identity Router architecture and a high availability Identity Router Standby architecture
- Geographically distributed high availability Identity Router architecture
- Complete the RSA SecurID Access Solution Architecture Workbook . This is strongly recommended. The workbook can be downloaded from the (RSA Link registration required).
- When provisioning has been completed by RSA, RSA will send an email containing your initial Super Admin credentials, URL and instructions needed to start configuration. The email will be sent to the contact email address for your organization, previously given to RSA Sales or the RSA Partner with whom you have been working. Note that a license file is not required for the Cloud Authentication Service or Identity Router.
- Once all the above steps have been done, you are ready to configure your deployment. Follow the Setup Checklist for your chosen deployment option: RADIUS, Relying Party or SSO Agent. The Setup Checklists are given in the RSA SecurID Access Cloud Authentication Service Setup and Configuration Guide, in Chapter 2 (Planning Your RSA SecurID Access Deployment) and include instructions for downloading and installing the RSA Identity Router. The checklists are:
- Setup Checklist for a New Deployment with a Relying Party,
- Setup Checklist for a New Deployment with a RADIUS Client, and
- Setup Checklist for a New Deployment with the SSO Agent
The checklists are also available in the online RSA SecurID Access Help
, in the RSA SecurID Access Product Overview section.
If you have chosen an architecture with more than one Identity Router, we recommend first testing and confirming the deployment is working with one Identity Router, then adding additional standby and/or clustered Identity Routers, as required.
Getting help during setup and configuration
If you have engaged RSA Professional Services or an RSA Partner to plan and/or setup and configure the Cloud Authentication Service:
If you are setting up and configuring the Cloud Authentication Service yourself and have questions or encounter issues with the Service, you may contact:
- They will do some or all of the steps above for you, according to the Statement of Work. They should be your first point of contact if you have any questions during this process, and any subsequent warranty period.
Note that RSA Support is a reactive service only. It does not provide a step-by-step planning or implementation service. Support is available to help with specific issues and questions that arise while you do this work.
- RSA Sales or the RSA Partner you have been working with, particularly for problems related to your sales order, licensing, product package, etc.
- RSA Support for any questions or issues, or for help contacting RSA Sales.
- The RSA SecurID Access Cloud Authentication Service Deployment training course is highly recommended.
- RSA Link's and pages. Note the knowledge base, downloads and product documentation spaces on this site. Discussions on the community forum can be used to share your own knowledge as well as get help from the community. Blog posts provide additional useful information. Events include upcoming webinars and conferences.
- RSA SecurID Access Help
- Bookmark the page for status updates. We recommend that you follow this page to get notifications emailed automatically to you.