Authentication Sources

You can automate the use of configured IDR SSO Agent identity providers (IdPs) for user authentication in the user application portal by adding IDR SSO Agent IdPs as authentication sources. You can also change the order in which the portal uses two or more IdPs to verify whether a user is authenticated. Automation ensures that IdPs are used in the proper order and eliminates manual steps for users when accessing applications, avoiding user errors. To add an authentication source, see Add an Authentication Source.

Note:  The Authentication Sources page is available only if Identity Router based portal is enabled.

When IdPs are configured in RSA, but not added as an authentication source, users may access the application portal by authenticating against a configured identity source, or they can manually select their IdP by clicking a link on the portal authentication page.

You must add and configure IdPs on the Identity Providers page of the Cloud Administration Console to make them available for adding as authentication sources. When you delete a configured IdP from the Identity Providers page in the Cloud Administration Console, it automatically becomes unavailable for use as an authentication source. The following IdPs may be available as authentication sources:

• Portal (default IdP). Uses the identity router default LDAP user name and password authentication.
• RSA IWA Connector. Uses Integrated Windows Authentication (IWA) to determine whether a user is already authenticated in the Windows domain.
• SAML 2 Generic IdP. Uses the Security Assertion Markup Language (SAML) version 2.0 protocol enabling the portal to interact with a SAML-capable IdP.