Announcements

SecurID® Integrations

VMware Horizon - RSA Ready SecurID Access Implementation Guide

Certified: 24th May, 2022

 

Solution Summary

Use Case

When integrated, VMware Horizon end users must authenticate with RSA SecurID Access to sign in. VMware Horizon can integrate using RADIUS.

 

Integration Types

RADIUS integrations provide a text driven interface for RSA SecurID Access within the partner application. RADIUS provides support for most RSA SecurID Access authentication methods and flows.

 

Supported Features

This section shows all of the supported features by integration type and by RSA SecurID Access component. Use this information to determine which integration type and which RSA SecurID Access component your deployment will use. The next section in this guide contains the steps to integrate RSA SecurID Access with VMware Horizon for each integration type.

 

VMware Horizon Integration with RSA Cloud Authentication Service

Authentication Methods

Authentication API

RADIUS

Relying Party

SSO Agent SAML

RSA SecurID - - -
LDAP Password - - -
Authenticate Approve - - -
Authenticate Tokencode - - -
Device Biometrics - - -
SMS Tokencode - - -
Voice Tokencode - - -
FIDO Token n/a n/a - -
Identity Assurance - - - -

 

VMware Horizon Integration with RSA Authentication Manager

Authentication Methods

Authentication API

RADIUS Authentication Agent
RSA SecurID - -
On-Demand Authentication - -
Risk-Based Authentication n/a - -

 

Supported
- Not supported
n/t Not yet tested or documented, but may be possible.
n/a Not applicable

Configuration Summary

The following links provide instructions on how to integrate VMware Horizon with RSA SecurID Access.

This document is not intended to suggest optimum installations or configurations. It assumes that the reader has both working knowledge of all products involved, and the ability to perform the tasks outlined in this section. Administrators should have access to the product documentation for all products in order to install the required components. All RSA SecurID Access and VMware Horizon components must be installed and working prior to the integration.

 

Integration Configuration

 

Certification Details

Date of testing: 24th May, 2022

RSA Cloud Authentication Service

RSA Authentication Manager 8.6, Virtual Appliance

VMware Horizon 8.4.0

Windows Server 2019(or 2022)

 

Known Issues

The integration between VMware Horizon and RSA SecurID Access (RSA Cloud offering supporting RSA SecurID RADIUS & Authenticate), requires a note to administrators and users.

 

RSA SecurID Access (RADIUS)

The user interaction differs from the RSA Authentication Manager 8.6 in that the user is required to provide their LDAP username/password at the initial logon screen, not SecurID user name and passcode as prompted on the initial login screen (See Login screen below). Once the user correctly enters their LDAP username/password they are subsequently prompted for their tokencode, provided they have set their Token PIN (See Enter the Tokencode below).

 

Login Screen:

jaink9_4-1654255753458.png

Set PIN for first time using, then click Continue.

jaink9_3-1654255732721.png

Re-Enter the new PIN:

jaink9_2-1654255711426.png

Enter generated passcode with the new PIN.

jaink9_1-1654255684030.png

Enter user’s Microsoft Active Directory credentials to login HTML Access client.

jaink9_0-1654255660063.png

 

No ratings
Version history
Last update:
‎2022-06-03 08:26 AM
Updated by:
Contributors
Article Dashboard