Cloud Authentication Service User Requirements

[#1]

The Cloud Authentication Service can prompt users for authentication through RADIUS clients, a browser to access web applications, or the RSA SecurID Authenticate app. Your users must meet the following requirements in order to authenticate.

The Cloud Authentication Service can prompt users for authentication through RADIUS clients, a browser to access web applications, or the RSA SecurID Authenticate app. Your users must meet the following requirements in order to authenticate.

• Supported Languages

• Browser Requirements

• RSA SecurID Authenticate Device Requirements

• FIDO Authenticator Requirements

• Authentication Method Requirements

Note:  RSA does not support using the RSA SecurID Authenticate app on a rooted Android device, a jailbroken iOS device, or a rooted Windows device. Do not allow such a device in your deployment.

​Supported Languages

The Cloud Authentication Service can prompt users for authentication in the browser or in the Authenticate app in the following languages:

• English

• Chinese

• French

• German

• Japanese

• Portuguese

• Spanish

​Browser Requirements

Browser	Minimum Required Version
Internet Explorer	11
Microsoft Edge Chrome (PC or desktop, Android) Firefox Safari (Mac, iOS)	Latest

​RSA SecurID Authenticate Device Requirements

App Store Download Requirements

To download RSA SecurID Authenticate from an app store, the user's device must meet the following requirements:

Device	Minimum Operating System Version
Android	6.0
iOS	11.0
Windows PC	Windows 10 Version 1511

Minimum Supported OS and App Versions

RSA updates the RSA SecurID Authenticator apps on a regular basis. RSA recommends that users always update to the latest version of the app. However, if users are unable to, the following table lists the supported minimum requirements for the Authenticate device.

Device	Minimum Required Operating System Version	Minimum Required App Version
Android	8.0	4.0
iOS	12.0	4.0
Windows PC	Windows 10 Version 1511 Note:  If you use Approve or Device Biometrics, ensure that your users' devices can access the VIP and IP address ranges used by the Windows Notification Service. For more information, see Windows Notification Service (WNS) VIP and IP Ranges.	2.0

​FIDO Authenticator Requirements

The FIDO authenticator can be used for primary authentication or for additional authentication. The system requirements vary based on the authentication type. Authenticators used for primary authentication also work for additional authentication.

System Requirements for FIDO Primary Authentication

Authenticator	Device with Minimum Operating System Version	Minimum Device Browser Version
FIDO2-certified security key, for example, a USB, BLE, or NFC security key. The security key must support multifactor authentication, such as a PIN or biometric. Before using the security key to authenticate, the user must set up user verification on the key using security key management software. For example, you can deploy RSA Security Key Utility. See Using RSA Security Key Utility.	Windows 10 Version 1803 Some security keys might not work with Windows 10 Version 1803. Mac OS	Chrome 76 Version 79 or higher provides a better user experience.
	Windows 10 Version 1903 This version supports setting up security key multifactor authentication when authenticating.	Microsoft Edge 44 Chrome 76 Firefox 69
Windows Hello	Windows 10 Version 1909 with Windows Hello enabled	Microsoft Edge 44 Chrome 76 Firefox 69
Android phone	Android 7.0 or higher	Chrome 79

System Requirements for FIDO Additional Authentication

Authenticator	Browser	Minimum Required Version
One of the following: FIDO2- or U2F-certified security key Windows Hello Android phone	Microsoft Edge	44.17763.1.0
	Chrome	PC or desktop: 67 Android: 70
	Firefox	PC or desktop: 60 Android: 63

Note:  FIDO authentication might not work on browsers that run on a virtual machine.

​Authentication Method Requirements

• Device Biometrics requires an iOS device that supports Touch ID or Face ID, a Samsung or Android version 6.0 device with a fingerprint sensor, or a Windows device with Windows Hello enabled.

• SMS Tokencode requires a phone that can receive SMS messages.

• Voice Tokencode requires a phone that can receive voice calls.

Previous Topic:Emergency Access for Cloud Authentication Service Users

Next Topic:Authenticator Registration

You are here

Table of Contents > Users and Authenticators > Cloud Authentication Service User System Requirements