Configure Email Notifications
9 days ago

Configure Email Notifications

To help increase security, you can configure Cloud Access Service (CAS) to automatically send a confirmation email to users when specific events occur. The following table describes what happens when each configuration option is enabled.

Configuration Option Result When Enabled
Authenticator registration

Emails are sent following user action related to registered iOS, Android, and Windows authenticators only. They are not sent for user management of other authenticators, such as FIDO authenticators.

Authenticator deletion

Emails are sent after a user adds or deletes a credential or deletes a registered authenticator.

If an administrator deletes a user's credential or authenticator, the user is notified in the RSA Authenticator app but does not receive an email.

If an administrator deletes a user's credential or authenticator, the user is notified in the iOS, Android, or Windows app but does not receive an email.

FIDO Authenticator registrationEmails are sent after a user registers a FIDO authenticator.
Emergency Access Code generated

Emails are sent when the administrator generates the Emergency Access Code in the Cloud Administration Console. The emails are not triggered by any other administrator or user action, such as when the user enters the OTP to authenticate.

Hardware Authenticator registrationEmails are sent after a user registers a hardware authenticator with CAS.
RSA DS100 registrationEmails are sent after a user registers RSA DS100 FIDO or OTP credential.
Change PasswordEmails are sent after a user changes their passwords successfully.
Code for Reset PasswordEmails are sent to users with a reset link and a one-time code that enable them to reset their password. The email notification also includes the expiration time of the code.
Enrollment Code Sent by Administrator Emails are sent to users with an enrollment URL and one-time code that enable them to log into My Page and register their first authenticator. The email notification also includes the expiration time of the code.
Enrollment Code Requested by User

Emails containing an enrollment code and its validity period are sent to users. This code enables them to log into My Page and register their first authenticator.

OATH HOTP OTP Hardware Authenticator registrationEmails are sent after a user registers an OATH HOTP OTP authenticator.
Damaged authenticator reported by the userEmails are sent after a user reports the authenticator as damaged.
Lost authenticator reported by the userEmails are sent after a user reports the authenticator as lost.
Stolen authenticator reported by the userEmails are sent after a user reports the authenticator as stolen.
Unusable authenticator reported by the user for reasons other than loss, theft, or damageEmails are sent after a user reports the authenticator as unusable.
Anomaly Detection (Password Spraying) Emails are sent to Super Administrators to notify them of specific suspicious authentication attempts.
Authenticator platform usage enforcementEmails are sent to users to notify them that their organization is restricting the use of the RSA Authenticator app on a specific operating system. The message advises them to migrate the app to a supported operating system before the grace period expires.

The emails are sent in the language of the registered device containing an authentication app. For example, if the device uses Spanish, the emails are sent in Spanish. If an administrator generates an Emergency Access Code for a user and the user did not register a device, the emails are sent in English. Anomaly Detection email notifications are sent in English.

Before you begin 

  • You must be a Super Administrator in the Cloud Administration Console.

  • (Optional) Select a custom logo to include in the email. The image file must be JPG or PNG format, and no larger than 50 KB. The maximum logo size is 220 x 80 pixels.

Procedure 

  1. In the Cloud Administration Console, click My Account > Company Settings and select the Email Notifications tab.

  2. (Optional) Click Upload Logo, and select the logo to include in the email.

    If you do not specify a logo, the email does not include a logo. To delete an existing logo, click the minus sign.

  3. In the From Email Address field, specify the email address from which the email will be sent.

  4. In the From Display Name field, specify the display name of the sender, for example, Jan Smith.

    The From email address is noreply@securid.com. You cannot change it. Using the example above, the email address looks like this: Jan Smith <noreply@securid.com>

    If necessary, be sure to whitelist noreply@securid.com, so the emails are delivered to users.

  5. (Optional) In the Signature field, specify the signature that appears at the bottom of the email. For example, you might add a name, job title, address, or contact information.

  6. Select the events for which you want to send emails:

    • Authenticator registration

    • Authenticator deletion

    • FIDO Authenticator registration

    • Emergency Access Code generated

    • Hardware Authenticator registration

    • RSA DS100 registration

    • Change Password

    • Code for Reset Password

    • Enrollment Code Sent by Administrator

    • Enrollment Code Requested by User

    • OATH HOTP OTP Hardware Authenticator registration

    • Damaged authenticator reported by the user

    • Lost authenticator reported by the user

    • Stolen authenticator reported by the user

    • Unusable authenticator reported by the user for reasons other than loss, theft, or damage

    • Anomaly Detection (Password Spraying)

     

    You can enable or disable multiple events. To read the email, click Preview Email. You cannot modify the subject or body of the email.

     

    Note:  All configuration options are enabled by default for new customers.

  7. Click Save Settings.

  8. (Optional) Click Publish Changes to activate the settings immediately.

Related Articles

Trending Articles

Don't see what you're looking for?