Certified: September 21, 2026
Solution Summary
This guide describes Stormshield SSL VPN integration with RSA ID Plus using RADIUS. Use this information to determine which use case and integration type your deployment will employ.
Use Case
Stormshield SSL VPN can be integrated with RSA ID Plus using RADIUS. When integrated, users must authenticate with RSA to sign in to Stormshield SSL VPN.
Integration Types
RADIUS integrations provide a text-driven interface for RSA within the partner application. RADIUS provides support for most RSA authentication methods and flows.
Supported Features
This section shows all the supported features by integration type and by RSA components. Use this information to determine which integration type and RSA component your deployment will use. The next section in this guide contains the instruction steps for how to integrate RSA with Stormshield SSL VPN using each integration type.
Stormshield SSL VPN Integration with Cloud Access Service (CAS)
| Authentication Methods | MFA API | RADIUS | SAML | OIDC | ||
| Relying Party | My Page | Relying Party | My Page | |||
| Approve | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| Approve with Code Matching | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| LDAP Password | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| SecurID OTP | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| Authenticate OTP | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| Device Biometrics | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| Device Biometrics with Code Matching | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| SMS OTP | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| Voice OTP | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| FIDO Security Key | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| QR Code | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
| Emergency Access Code | Not tested | Supported | Not tested | Not tested | Not tested | Not tested |
Stormshield SSL VPN Integration with Authentication Manager (AM)
| Authentication Methods | MFA API | RADIUS | Authentication Agent |
|---|---|---|---|
| RSA SecurID | Not tested | Supported | Not tested |
| On Demand Authentication | Not tested | Not tested | Not tested |
| Risk-Based Authentication | Not tested | Not tested | Not tested |
Configuration Summary
This section contains instruction steps that show how to integrate Stormshield SSL VPN with RSA using all of the integration types.
This document is not intended to suggest optimum installations or configurations. It is assumed that the reader has both working knowledge of all products involved, and the ability to perform the tasks outlined in this section. Administrators should have access to the product documentation for all products to install the required components.
All RSA and Stormshield SSL VPN components must be installed and working prior to the integration.
This section of the guide includes links to the appropriate sections for configuring both sides for each use case.
Integration Configuration
CAS
AM
- Stormshield SSL VPN - RADIUS Configuration - Authentication Manager - RSA Ready Implementation Guide
RSA Terminology Changes
The following table describes the differences in the terminologies used in the different versions of RSA products and components.
| Previous Version | New Version | Examples/Comments |
| Cloud Authentication Service | Cloud Access Service | |
| Token | OTP Credential | SecurID OTP Credential |
| Authenticator | Hardware Authenticator | |
| Tokencode | OTP | SecurID OTP, SMS OTP, Voice OTP |
| Access Code | Emergency Access Code | |
| SecurID Authenticate app | RSA Authenticator app | RSA Authenticator app for iOS and Android, RSA Authenticator app for Windows |
| Device | Authenticator | Register an authenticator |
| Company ID | Organization ID | |
| Account | Credential | |
| Device Serial Number | Binding ID |
Certification Details
CAS
AM
Stormshield SSL VPN
Known Issues
No known issues.
Related Articles
Stormshield SSL VPN - RADIUS Configuration - Authentication Manager - RSA Ready Implementation Guide 1Number of Views Stormshield SSL VPN - RADIUS Configuration - Cloud Access Service - RSA Ready Implementation Guide 1Number of Views Fortinet IPsec VPN – RSA Ready Implementation Guide 15Number of Views Fortinet IPsec VPN - SAML Relying Party Configuration – RSA Ready Implementation Guide 13Number of Views FortiGate Firewall - RADIUS Configuration Using SSL VPN - RSA Ready Implementation Guide 106Number of Views
Trending Articles
How to Change the Token Lifetime Extension Window in Authentication Manager Using rsautil RSA Authentication Manager 8.9 Patches and Hotfixes Readme RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Troubleshooting RSA MFA Agent for Microsoft Windows RSA SecurID Software Token for Microsoft Windows shows blank screen when asked to select a device where the token will be …