SecureID Two Factor for Privileged AD Accounts

[ScottMessler]

We are looking to implement SecureID for privileged active directory accounts. Example: I can log into my workstation with my standard AD account (scott) however when I attempt to run AD Users and Computers as my  admin AD account (ScottADM) RSA prompts me for a secure ID token so we are using two factor for elevated accounts. Is this possible to do with the RSA Windows Agent or a different RSA product?

Thanks, Scott

[jlim23]

This is something I'm interested in, as well.  Is there a solution for this today?

[JoshLobb]

Hi,

Yes you can.

You can configure RSA to challenge "A group of users" so RSA is not required unless the user is in a group.

Auth_agent_install_guide v 7.4 Page 25

Regards
Josh