This section describes how to integrate RSA SecurID Access with Fortanix Data Security Manager using Relying Party. Relying party uses SAML 2.0 to integrate RSA SecurID Access as a SAML Identity Provider (IdP) to Fortanix Data Security Manager SAML Service Provider (SP).

Architecture Diagram

Configure RSA Cloud Authentication Service

Perform these steps to configure RSA Cloud Authentication Service as a relying party SAML IdP to Fortanix Data Security Manager .

Procedure

1. Sign into the RSA Cloud Administration Console and browse to Authentication Clients > Relying Parties and click Add a Relying Party.

2. From the Relying Party Catalog, select the +Add button for Service Provider SAML.

3. In the Basic Information section, enter a name and click Next Step.

4. In the Authentication section, do the following:

a. Under Authentication Details, select RSA SecurID Access manages all authentication.

b. Select appropriate primary and additional authentication methods.

c. Click Next Step.

5.On the next page, under Service Provider Metadata enter the following values:

a. Assertion Consumer Service (ACS) URL Enter the url: https://sdkms.fortanix.com/saml.

b. Service Provider Entity ID - Enter the url: https://sdkms.fortanix.com/saml/metadata.xml.

6. Select Default Service Provider Entity ID in Audience for SAML Response section

7. In the Message Protection section, under SAML Response Protection, select IdP signs entire SAML response:

8. Click Show Advanced Configuration.

9. Under User Identity section, select the following:

a. Identifier Type: Select Auto Detect.

b. Property: Select Auto Detect.

10. Click Save and Finish.

11. Click the Publish Changes button in the top left corner of the page, and wait for the operation to complete.

12. On the My Relying Parties page, do the following:

a. Select Metadata from the Edit drop-down list to view and download an XML file containing your RSA SecurID Access IdP’s metadata.

b. Click Download Metadata File in the View or Download Identity Provider Metadata page to download the file. A file named IdpMetadata.xml should be downloaded.

Configure Fortanix Data Security Manager

Perform these steps to integrate Fortanix Data Security Manager with RSA SecurID Access as a Relying Party SAML SP.

Procedure

1. Log in to your Fortanix DSM portal.

2. From the left panel click Settings > AUTHENTICATION > SINGLE SIGN-ON.

3. Add the SAML integration, and upload the SAML file downloaded from Step 12 of Configure RSA Cloud Authentication Service.

4.Enter your custom SSO Title and Logo URL.

5. Click ADD INTEGRATION.

6. Once your have added the configuration successfully, you will be able to see your configuration:

Configuration is complete.

For additional integrations, see "Configuration Summary" section.