How to calculate the RSA REST API Authentication Response Time
2 years ago
Originally Published: 2021-04-16
Article Number
000065000
Applies To
RSA Product Set: RSA SecurID
RSA Product/Service Type: Authentication Agent API
RSA Version/Condition: 8.2.1.x, 8.3.x, 8.4.x, 8.5.x
Issue
In some cases you may need to find out the time a REST API Authentication will take in your deployment, this article will walk through the steps to calculate it.
Tasks
Article How to set up the REST RSA SecurID Authentication API for Authentication Manager 8.2 SP1 describes the steps to use REST Authentication API in your environment, go through the steps to enable it.
Resolution
  1. Download the file output.txt attached in this article.
  2. Place it on a server that can send REST API requests to your authentication manager.
  3. At the same directory that has this file, open a cmd/CLI and run the below command:
curl -w "@output.txt" -k -d "{\"clientId\":\"AgentName\",\"subjectName\":\"UserID\",\"subjectCredentials\":[{\"methodId\":\"SECURID\",\"collectedInputs\":[{\"name\":\"SECURID\",\"value\":\"1234\"}]}],\"context\":{\"authnAttemptId\":\"\",\"messageId\":\"test52130211962426\",\"inResponseTo\":\"\"}}" -H "client-key: Access Key" -H "Content-Type: application/json" https://IP-Address:5555/mfa/v1_1/authn/initialize
  • Replace AgentName with the hostname of an agent added on the Security Console to do the REST API Request, and this agent should have no ip-address.
  • UserID is the logon ID of the user you would like to test the Authentication with.
  • Replace 1234 with the SecurID Token value to do a test Authentication.
  • To get the Access Key value, Go to the Security Console --> Setup --> System Settings --> RSA SecurID Authentication API, and use the Access Key value from there.
  • Replace IP-Address with the ip-address or hostname for the Authentication Manager.
  1. Example from a Windows cmd:
curl -w "@output.txt" -k -d "{\"clientId\":\"Postman\",\"subjectName\":\"Menna\",\"subjectCredentials\":[{\"methodId\":\"SECURID\",\"collectedInputs\":[{\"name\":\"SECURID\",\"value\":\"1234\"}]}],\"context\":{\"authnAttemptId\":\"\",\"messageId\":\"test52130211962426\",\"inResponseTo\":\"\"}}" -H "client-key: xsd7c4pk4x7n3h0546ej6nnl1ayuz1517619p60a5nc91b07lyy68apiopuql86o" -H "Content-Type: application/json" https://192.168.231.4:5555/mfa/v1_1/authn/initialize


            Output: 
{"context":{"authnAttemptId":"ad20c24b-4e56-422a-bac4-014b75e335c4","messageId":"86a0f6fb-2792-40b7-bade-fd1cd91e7b71","inResponseTo":"test52130211962426"},"credentialValidationResults":[{"methodId":"SECURID","methodResponseCode":"SUCCESS","methodReasonCode":null,"authnAttributes":[]}],"attemptResponseCode":"SUCCESS","attemptReasonCode":"CREDENTIAL_VERIFIED","challengeMethods":{"challenges":[{"methodSetId":null,"requiredMethods":[]}]}}time_namelookup:  0.000001s
time_connect:  0.000001s
time_appconnect:  0.047000s
time_pretransfer:  0.047000s
time_redirect:  0.000000s
time_starttransfer:  0.063000s
----------
time_total:  0.063000s
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).