Cloud Multifactor Authentication

[RaymondTang1]

Are there any step by step instructions/documentation on how to install the Cloud Multifactor authentication?  We are currently using the RSA AM for software tokens for citrix vpn.  We would like to leverage the ability to use our cell phones for push notifications to bypass the soft token.

Thanks

[JayGuillette]

You need SecurID Access, which is [kind of] a separate product.  You get a VMWare .ova file [latest version also supports Hyper-V] which you deploy on your local VMWare, this server is called the Identity Router, or IDR, and you contact the Cloud services to connect to the Cloud.  Your Identity Source is configured locally, and if you want to inter-operate with your AM, you build one or two connections between the IDR and your AM Primary

 1. a connection from your AM 8.2 SP1 Operations Console that allows your AM people access to Multi-factor Auth from the IDR and cloud - which is what you are asking for. 

 2.  a 'trusted realm 'connection that allows people on your IDR to access AM tokens

In this scenario the AM server is now being called the token server, and the Access Manager is cloud based with MFA.  You'll need Sales to POC this.

[TedBarbour · Accepted solution]

Hi Raymond - if you have not been provisioned a cloud tenant Getting started with the RSA SecurID Access Cloud Authentication Service provides you with the information you need.

Basically contact your salesperson to get the process started.

Thanks,

Ted

[RaymondTang1]

I will take a look at this.  Thank you both for your prompt reply.  

[NathanFurze]

Raymond,

     To add more context - depending on what RSA SecurID Access license package you have will determine what features are available - https://www.rsa.com/en-us/products/rsa-securid-suite/rsa-securid-access/identity-packaging.   If you have an Enterprise license for RSA SecurID Access there are some cloud components that you are entitled and additional multi-factor authenticators can be purchased to leverage the push notification authentication factor.  We have various ways to integrate with Citrix - https://community.rsa.com/docs/DOC-66800 

Hope this helps.

Nathan