Cloud Access Service Updates

The following subsections outline the new and enhanced features of the Cloud Access Service (CAS).

Convert Authentication Manager Internal Database ID Source to a Local ID Source in the Cloud Administration Console 

Cloud Access Service (CAS) now supports converting an existing Authentication Manager (AM) Internal Database identity source to a Local identity source. After conversion, the connection between the Cloud and the AM server is removed, and you can manage users directly from the Cloud Administration Console instead of the AM Security Console. This enhancement helps you transition from a hybrid deployment to a Cloud-only CAS deployment with greater flexibility and simplified user management.

Common User Schema Migration

The Common User Schema migration is now available as previously announced in Common User Schema Migration Coming in September 2026. This enhancement introduces a standardized user attribute model across supported identity sources, simplifying user management and configuration across policies, applications, and other features. You can use the Common User Schema Migration Dashboard to review schema mappings, monitor migration readiness, and address any required actions before the scheduled migration date.

Enhanced Local Identity Source CSV Import Template

The Local Identity Source CSV import template has been enhanced to include all Common User Schema attributes for customers who have migrated to the Common User Schema. Customers who have not yet migrated to the Common User Schema will continue to see only the existing columns in the CSV import template.

Access Deprovisioning

In the Cloud Administration Console, access deprovisioning is now available to help reduce the risk of unnecessary access when users leave the organization, applications are deleted, or access requirements change. The feature supports all application types and connectors. To use this capability, the Fulfillment setting must be enabled for the application, and the Enable Delete Actions setting must be enabled and configured in the application's Fulfillment settings.
When a user is deleted or is no longer synchronized with CAS, access is automatically deprovisioned from applications that have Automatic Users Fulfillment enabled in the application's Fulfillment settings. Access can be removed immediately or after a configured grace period.
Application access can also be deprovisioned when an application is deleted. If Automatic Users Fulfillment is enabled when deleting an application, user access to the application is deprovisioned as part of the deletion process. When Access Policy Evaluation is enabled in an application's Fulfillment settings, users who no longer meet the application's target population criteria are deprovisioned when they access the application.   

Third-Party Integrations from RSA Ready

The following integrations are completed or certified by RSA through the RSA Ready Technology Partner Program. For the complete catalog of Implementation Guides, refer to RSA Ready Integrations on the RSA Community.

• New and Updated Integrations for ID Plus

  • Anomalix idGenius (SCIM, SAML)
  • AWS IAM (SAML)
  • Cato Networks (OIDC)
  • Citrix Netscaler (RADIUS)
  • FortiNet IPSec VPN (SAML)
  • Okta SSO (SCIM)

Upcoming End of Primary Support (EOPS) Details

The following table provides details on RSA products reaching the end of support within the next six months. 

For more details, refer to Product Life Cycle.

Product Documentation and Support

Visit RSA Community to access the latest version of the product documentation, answers to common questions, solutions to known problems, community discussions, and case management.  

Cloud Access Service Status Updates

For information about all service incidents and scheduled maintenance windows for the Cloud Access Service, subscribe to https://status.securid.com.