This article describes how to integrate CrowdStrike Falcon Identity Protection with RSA Cloud Authentication Service (CAS) using RSA MFA API (REST).

Configure CAS

Perform these steps to configure CAS using the REST API.

Prerequisite: You must have a CAS Admin account.

Procedure

1. Generate an Authentication API Key in CAS.
   1. Sign in to RSA Cloud Administration Console.
   2. Navigate to Platform > API Access Management > Authentication API Keys.
   3. Add a new Authentication API Key.
   4. Copy the API key and URL to use when setting up the connector.
2. If the integration uses assurance levels, validate that they are defined correctly in CAS.

Configure CrowdStrike Falcon Identity Protection

Perform these steps to configure CrowdStrike Falcon Identity Protection.

Procedure

1. In the Falcon console, go to Identity protection > Configure > Connectors.
2. In the Select connector list, select RSA CAS and click Add.
3. Enter the API Key and URL copied from CAS.
4. (Optional) In the User Identifier list, select the attribute that contains the value the MFA provider requires to uniquely identify a user.
   For example, you might have your MFA provider configured to require the e-mail address or principal name. We recommend that you keep the Default setting.
5. Click Save.
   The indicator turns green within a minute, indicating that the connection has been successfully established.
6. If you need multiple CAS MFA connectors, repeat Steps 2 through 5.

Note

When configuring an additional connector, set Scope to Per domain, and enter all Domains that the additional connector should cover. All other Domains are covered by the original connector that was configured with Scope set to Default.

The configuration is complete.