Authentication Manager 8.5 P5 connection to Cloud Authentication Service gets “permitted only authenticators you have purchased”

[#1]

Article Number

000039851

Applies To

RSA Product Set: RSA SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.5.0.5.0, 8.6.0.1.0
Platform: Linux
Platform (Other): P5 embedded IDR Govcloud
O/S Version: SUSE Linux 12
 

Issue

When connecting an on-premise Authentication Manager, AM server to the SecurID Cloud Authentication Service, CAS from the mypage logon the following message is displayed cannot register new app.
“You have not registered an authenticator" message.

Image description
 
When we try to Select an authenticator from the drop-down, we get the following error:
“You are permitted to use only the authenticators you have purchased”.

Image description

Cause

This is a license issue, it means something like you only purchased SecurID Tokens as the auth method, but are trying to use the authenticate app. The SaaS team has to enable all authenticator features, so we need to compare what your license includes with what is going on here. That is why the message said, "you are permitted to use only the authenticators you have purchased".
 

Resolution

You will need to speak with Sales, and decide on which authenticator methods you want to use and pay for.
Image description

When these methods become part of your license, then you will not get the error message "you are permitted to use only the authenticators you have purchased" when you select them for your assurance level.

Workaround

Use the authenticators, e.g. Tokens that you already own.