SecurID Product Documentation

The latest product documentation is always available on RSA Link at

For a comprehensive list of links to all release notes for the Cloud Authentication Service, SecurID Authentication Manager, authentication agents, and token authenticators, see SecurID Product Release Notes.

SecurID Authentication Manager Documentation for Administrators

Document Description
Planning Guide Describes the high-level architecture of Authentication Manager and how it integrates with your network.

RSA Hardware Appliance Getting Started

Deploy a hardware appliance and performing the Authentication Manager Quick Setup process.

Amazon Machine Image (AMI) Getting Started

Azure Virtual Appliance Getting Started

Hyper-V Virtual Appliance Getting Started

VMware Virtual Appliance Getting Started

Deploy a virtual appliance and performing the Authentication Manager Quick Setup process.
Web Tier Getting Started Provides instructions for deploying the web tier.
Setup and Configuration Guide
Set up and configure Authentication Manager, and upgrading to the most recent version.
Connect SecurID Authentication Manager to the Cloud Authentication Service Deploy and manage new mobile authentication methods for your Authentication Manager users. Allow users to access agent-protected resources with the SecurID Authenticate app.
Quick Setup - Connect SecurID Authentication Manager to the Cloud Authentication Service with an Embedded Identity Router By downloading and configuring the embedded identity router to each primary and replica instance, you can avoid the time and effort of deploying separate identity routers in your on-premises network or in the Amazon Web Services cloud.
Security Configuration Guide Secure deployment and usage settings, secure maintenance, and physical security controls.
Administrator's Guide An overview of Authentication Manager and its features, and how to configure the system and perform a wide range of administration tasks.
Help Desk Administrator Reference Lists the most common activities that a Help Desk Administrator performs to manage Authentication Manager.
SecurID RADIUS Reference Guide Usage and settings for the initialization files, dictionary files, and configuration files used by SecurID RADIUS.

Perform daily administration tasks in the Security Console and configuration and setup tasks in the Operations Console. Includes instructions for the most common tasks for Help Desk Administrators.

SNMP Reference Configure Simple Network Management Protocol (SNMP) to monitor Authentication Manager on a hardware appliance or a virtual appliance.
Troubleshooting Common error messages in Authentication Manager and appropriate actions for troubleshooting.
Performance and Scalability Guide Describes the factors that affect the performance of an Authentication Manager deployment and provides performance test data.
Release Notes (Version 8.6) Describes the latest product improvements and fixed issues.
Known Issues (Version 8.6) Describes known issues and workarounds.

Cloud Authentication Service Documentation for Administrators

Document Description
POC Quick Setup Guide Get the Cloud Authentication Service up and running in less than an hour in your own test environment.
Planning Guide Overview of key concepts and deployment types to help you complete the planning process with your Quick Setup Guide.

Quick Setup Guide for RADIUS Clients

Quick Setup Guide for SAML Applications and Third-Party SSO

Quick Setup Guide for SSO

Get the Cloud Authentication Service up and running in less than an hour in your own production environment. Select the guide for the deployment type that you want.

Cloud Administration Console Help All system concepts and administrative tasks to install and maintain your deployment. Accessible from the Cloud Administration Console.
Select an Integration Path for SecurID Authentication Manager with the Cloud Authentication Service Configure the Cloud Authentication Service and SecurID Authentication Manager to work together so that users can authenticate using SecurID tokens to access SaaS and on-premise web applications, and either SecurID tokens or SecurID Authenticate Tokencodes from all access points controlled by Authentication Manager including agents, RSA Ready Partner implementations, and RADIUS clients.
Integration Guide for Access Manager Integrate the Cloud Authentication Service into your RSA® Access Manager deployment.
Security Configuration Guide Best practices for configuring a secure on-premise identity router.
SSO Agent Performance and Scalability Guide Describes the factors that affect the performance of your deployment and provides suggestions for ensuring efficient and reliable authentication service.
SecurID® Release Notes: Cloud Authentication Service and SecurID Authenticate App Describes the latest product improvements and fixed issues.

SecurID Documentation for Developers

Document Description
SecurID Authentication API Developer's Guide Develop agents that extend your authentication methods to the Cloud Authentication Service and obtain the benefits of a REST-based programming interface. Also for SSO partners who want to delegate authentication to the Cloud Authentication Service.
Developer’s Guide
Develop custom programs using the Authentication Manager application programming interfaces (APIs). Includes an overview of the Authentication Manager APIs and the related Javadoc. The software development kit (SDK) is in the Authentication Manager SDK directory of the SecurID Authentication Manager Extras ZIP file that is available at
agent documentation Install and configure SecurID Authentication Manager agent software, and information about developing custom agents. See
Authentication Manager Bulk Administration Utility (AMBA) Guide Describes how the SecurID Authentication Manager Bulk Administration (AMBA) command-line utility simplifies the bulk administration of users, tokens, agents, and so on. Requires a standalone AMBA license, or the Enterprise or Premium Edition of SecurID.

Custom Web Portal Developer's Guide

Develop a custom portal for users to access protected applications through the Cloud Authentication Service.
SAML Enablement Guide for Application Developers Enable Security Assertion Markup Language (SAML) for web-based applications that do not yet support SAML, and to integrate those applications with the Cloud Authentication Service.
Identity Router CLI Reference Guide Use the command line interface to manage user profile data (keychains) on the identity router. For administrators and developers.

SecurID Documentation for Users

User Audience/Authentication Methods Available Documentation
SecurID Authentication Manager SecurID tokens Help is provided for the Self-Service Console. On the Help tab in the console, click Self-Service Console Help. Help is also provided in the apps.
Methods supported by the Cloud Authentication Service

For an overview of SecurID and instructions for using the standard application portal and authentication methods, see the SecurID Help, available in the application portal and the Authenticate app.

English, French, German, Japanese, Portuguese, Chinese, and Spanish