Configure E-mail for On-Demand Tokencode Delivery

You can configure a deployment to send on-demand tokencodes to a user’s e-mail address. First you must configure the e-mail server connection for each instance.

Before you begin 

• Confirm that you have the following information:

  • Hostname. The hostname of the server you will use to send e-mail notifications.

  • SMTP port. The port you will use for e-mail transmissions.

  • E-mail address. The address from which the e-mail notifications will be sent.

  • Logon. Whether your e-mail server requires a User ID and password.

• Configure a destination e-mail address for each user.

• Use an e-mail address other than the one for which on-demand authentication enables access. For example, make the user’s personal e-mail address the destination when the user needs the tokencode to access his or her e-mail account at work.

• Configure the SMTP(s) Mail Service. You must do this for each instance in your deployment.

• Ensure that RSA Authentication Manager can access the database attribute where you store users’ e-mail addresses.For more information, see Identity Attribute Definitions for On-Demand Tokencode Delivery by E-Mail.

Procedure 

1. In the Security Console, click Setup > System Settings.

2. Click On-Demand Tokencode Delivery.

3. (Optional) You can add e-mail delivery to the SMS delivery method, if you enable this feature. When you use the Security Console to select the delivery method for a user, you can choose SMS to send both a text message and an e-mail.

   Click the SMS Configuration tab, and select the Add Delivery by E-mail checkbox.

   To configure SMS tokencode delivery, see Configure the HTTP Plug-In for On-Demand Tokencode Delivery.

4. Click the E-mail Configuration tab.

5. Select Enable the delivery of On-demand Tokencodes through e-mail.

6. From the User Attribute to Provide E-mail Destination drop-down menu, select the attribute that provides the e-mail addresses used to deliver on-demand tokencodes to users.

7. Click Save.

8. (Optional) On the Tokencode Settings tab, do the following:

   1. In the On-Demand Tokencode Message field, enter the text that you want to display in the text message that contains the on-demand tokencode.

   2. You must leave the $OTT variable in the message. The on-demand tokencode is inserted in place of this variable.

9. In the On-Demand Tokencode Lifetime field, enter the length of time that on-demand tokencodes are valid after they are delivered to the user.

10. Click Save.