RSA MFA - 1 API KEY with multiple DC

[Mauro]

Hello! I have a question about an implementation I am doing. I need to generate domain PC authentication, however, my client just told me that GPO policies handle them globally, that is, if they generate an RSA MFA template configuration, these are replicated for all domain controllers in the network and therefore, the KEY API configured in an AD, is replicated for all DCs and everyone tries to communicate to the cloud using the same KEY API, which, as I understand it, is not possible, since the KEY API can only Be used for by a device.

How can I solve this issue?

Regards!

[TedBarbour · Accepted solution]

Hi mauricio perez‌ - it is a good practice to periodically change the API key but one key should work with multiple end users.

Hope that is helpful,

Ted

[Mauro]

Thank you very much Ted! my question is focused on the operation of several domain controllers, pointing to the same KEY API in the RSA cloud (my account / company setting / Authentication API Keys)