Cisco ACS / ASA sends two requests to Authentication Manager 8.x
Originally Published: 2014-12-12
Last Modified: 2023-10-06
Article Number
000049743
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager 
RSA Version/Condition: 8.x
Platform: SUSE
Issue
The real-time authentication activity monitor of the authentication manager instance shows a successful authentication from the CISCO ACS / ASA device and then a short time later another authentication appears. The second authentication fails with 'Authentication method failed, passcode format error' as the reason.

Native SecurID authentications from other Authentication Agents are working without issue.
Cause
The CISCO ACS / ASA device was configured to send an authentication and authorization request to the RSA Authentication Manager. RSA Authentication Manager processed the authentication request successfully but did not know what to do with the authorization request hence the error reported in the real-time authentication activity monitor.
 
Resolution
Please refer to CISCO ACS / ASA documentation for making changes to the CISCO configuration to only send authentication requests to the RSA Authentication Manager.

RSA Ready Community is a platform for customers, partners and RSA enthusiasts to learn about products that have been certified to inter-operate with RSA products, including access to integration guides. The CISCO ACS / ASA and RSA Authentication Manager integration is available from URL https://community.emc.com/docs/DOC-37405

Related Articles

Trending Articles

Don't see what you're looking for?