Cloud Authentication Service Updates

The following subsections provide the highlights of the new and enhanced features of the Cloud Authentication Service (CAS).

Enable My Page Passwordless Authentication with Access Policy 2.0

RSA introduces Access Policy 2.0 to offer users a secure passwordless authentication experience for My Page. With the 2.0 Access Policy, in the Cloud Administration Console, you can now define the default primary authentication method and the alternate methods (additional or step-up authentication methods) for a set of users that use the same policy at one time. Access Policy 2.0 saves you time and gives you the flexibility to configure multiple passwordless methods. For example, QR Code can now be used as a primary authentication method with 2.0 Policies.

For more information, see Access Policy 2.0 : Easily Rollout Passwordless to the Masses.

Enhancements to User Import CSV File

The user import CSV file has been enhanced with two new columns: "Password Delivery Method" and "Initial Password Delivery Location" to share passwords with new users using their specified email addresses.

Disabled Options and Settings If No Identity Router Deployed

In the Cloud Administration Console, when there is no deployed identity router (IDR), all the options and settings related to identity routers will be disabled by default to avoid confusion. For example, if there is no deployed identity router, you cannot add an application through IDR SSO Service Identity Providers. Once you deploy an identity router (IDR), all the IDR-related options and settings will be enabled by default.

Secure User Enrollment with ID Proofing

Identity proofing is now part of the secure enrollment process through RSA My Page. Identity proofing is the process of establishing elevated trust through verifying a user’s identity using independent high-assurance verification methods. If this feature is enabled, when users sign into My Page to register their first RSA credential, a new ID verification screen will appear after users enter their username and password. Upon successful completion of verification, a user is given access to My Page to proceed with credential registration. In the Cloud Administration Console, an administrator can add user verification identity providers and configure attributes mapping and scopes.

This feature is currently available in limited release. If you are interested in securely enrolling users to their RSA authenticators with an ID Proofing method, please contact your RSA Sales Representative.

Upcoming End of Primary Support (EOPS) Details

The following table provides details of the RSA products reaching the end of support within the next six months: