Provide an Offline Emergency Passcode

You can provide users with an offline emergency passcode to use under the following conditions:

• The user's RSA SecurID Token is unavailable, or the user forgot his or her PIN.

• The user's Windows device cannot contact the AM server through the network.

Offline emergency passcode cannot be used to access resources protected by Cloud Access Service (CAS).

Before you begin 

Confirm the following:

• The user’s security domain allows offline authentication and permits the user to download offline emergency access tokencodes.

• The user has authenticated to an agent that supports offline authentication and the agent has downloaded days of offline authentication data.

Procedure 

1. In the Security Console, click Identity > Users > Manage Existing.

2. Use the search fields to find the user who needs an offline emergency passcode.

3. From the search results, click the user.

4. From the context menu, click Manage Emergency Offline Access.

5. On the Manage Emergency Access Passcodes page, note the Offline Emergency Passcode and its expiration date.

6. Select Reset Offline Emergency Access Passcode, if you want the user to download a new offline emergency passcode the next time he or she authenticates online. If selected, the new passcode downloads automatically.

7. Click Update.