RSA Product Set:  SecurID Access
RSA Product/Service Type:  SecurID Access Prime

Authentication Manager Prime Self-Service Portal is missing the HTTP Strict Transport Security (HSTS) Header. This  article walks through on enabling HSTS header for the AM Prime Self-Service Portal.

1. HSTS is configurable in ssp.properties .
2. Make a copy of ssp.properties located under <Primekit_Installation_Directory>/configs/ssp/config
   set "enable.hsts.filter" parameter in the ssp.properties to true:

enable.hsts.filter=true

3. Make a copy of the headerConfig.xml under <Primekit_Installation_Directory>/configs/ssp/config
4. Modify 'headerConfig.xml' as follows:

<?xml version="1.0" encoding="UTF-8"?>
<header>
        <map key="Strict-Transport-Security" value="max-age=31536000; includeSubDomains"/>
        <map key="Referrer-Policy" value="no-referrer"/>
</header>

5. Restart SSP service