send create_user command to AM 8.3

[carlobertini]

Platform: AM 8.3

Question: how to send command to the AM from external application ?

We need to execute create user, delete user, assign user to token, assign Pin and more.

Looking RSA documentatiions, it appears that the REST-API now available on AM 8.3, allow only authentication command, not management.

Is there any way to send commands to AM 8.3 that allow token and user management operations ?

many thanks,

Carlo

[JayGuillette]

There is an Admin API SDK.

There is also a Bulk Admin tool called AMBA

[TedBarbour]

Hi Carlo - please download the AM 8.3 Extras and you will find the AM Admin SDK that provides an API that allows essentially all of the capabilities in the Security Console.

Thanks,

Ted

[carlobertini]

Hi Ted,

many thanks, let me check AM 8.3 extras and reply you soon.

waiting the download -it seems took a while- could you please let me know your comments and suggestion on:

- direct telnet to AM 8 is no more available, as old version do. This means: no telnet / ssl to AM in order to execute commands is available. it is true ?

- Inside AM 8.3 Extras I found "RSA Authentication Manager SDK". is there any documantation I can have access too ?

- I found another doc: “rsa_securid_access_rsa_securid_authentication_api_developers_guide.pdf”

on page 11:

Note: The RSA SecurID Authentication API does not support user password change or device

registration as part of the authentication workflow. Users must perform device registration and

manage their passwords prior to initiating authentication with clients that use the API.

It appear only authentication is available via API, and there are no api example of create user, token delation an so on. 

many thanks,

Carlo

[TedBarbour]

Regarding command line access, you can enable SSH access using the AM Operations Console menu Administration > Operating System Access.

The SDK documentation is in the Extras outside of the SDK itself in directory "Developer Guide".

The SDK has administrative actions sample code in directory RSA Authentication Manager SDK/samples/admin. 

You will find that this is a very low level API.  An alternative is the AM Integration Services (AMIS) middleware available from our Professional Services group.  This presents a higher level REST-based interface that shields you from much of the low level detail required when using the SDK itself.

Talk to your sales account rep if any interest in AMIS.

Thanks,

Ted