Java applications with RSA support

[ELemings]

Greetings everyone,

I'm an RSA newbie and just trying to understand how to make our software work with RSA.  (If I've posted in the wrong forum, my apologies.  Also if this question is already documented/answered somewhere -- in a FAQ perhaps -- please mention with a link.)

Currently, we have a Java application that allows a user to enter their username and password.  The application then uses these credentials to access protected URLs over HTTPS/TLS on an Apache web server that is configured to authenticate with a cross-platform LDAP server.  The server then returns the appropriate response based on the authorization: 401, 403, 200, etc.

How would this same paradigm worth with RSA?  That is, how would the Java application need to be enhanced to allow a user to enter their username and *RSA passcode* to access the protected URLs on the Apache web server?  Does the Java application need to support sessions and cookie management?  Does the Apache server need the RSA WebAgent? 

Many thanks,

Eric.

[TedBarbour · Accepted solution]

Hi Eric - RSA provides a couple of different SDKs to enable you to integrate SecurID authentication to your application.  The legacy solution (works with Authentication Manager only) is to use the 8.6 Authentication Agent SDK for Java  at https://community.rsa.com/docs/DOC-40601#agents.  

The latest solution is the SecurID Authentication API which is documented at RSA SecurID Authentication API Developer's Guide.  This REST API enables you to authenticate to an Authentication Manager via SecurID token or using other authentication methods (such as mobile device approve or biometrics) via the SecurID Cloud Authentication Service.

Hope that helps,

Ted