How to configure restricted access times for authentication agents in RSA Authentication Manager 8.x

[#1]

Article Number

000026566

Applies To

RSA Product Set:  SecurID
RSA Product/Service Type:  Authentication Manager
RSA Version/Condition:  8.x
Platform: Linux

Issue

This article explains how to configure restricted access times in Authentication Manager 8.x for user groups that need restricted access to the agent based on a predefined set time on the RSA Authentication Manager server.

This option is useful, for example, if there is a requirement to allow contractors to authentication to a specific authentication agent during business hours only.

Resolution

To configure restricted access times the authentication agent must be a restricted agent where the agent May be accessed only by members of user groups granted access to this agent.

1. Login to the Authentication Manager primary's Security Console.
2. Create a restricted agent.
   1. Navigate to Access > Authentication Agents > Add New). 
   2. Enter the hostname and IP address,
   3. For User Group Access Restriction, choose Allow access only to members of user groups who are granted access to this agent.
   4. Click Save.
3. Create a user group.
   1. Navigate to Identity > User Groups > Add New. 
   2. Select an identity source and security domain
   3. Add a group name.
   4. Click Save. 
4. Grant group access to the restricted agent
   1. Navigate to Identity > User Groups > Manage Existing.
   2. Click the User Group and select Grant Access to More...
   3. Select an authentication agent, click on it and choose and select Grant Access to Agent.
5. Restricted Access Times
   1. Navigate to User Groups > Manage Existing.
   2. Click the user group and select Restrict Access Times.
   3. Choose a Access Time Template (optional) or select the access times required.
   4. Click Save when done.

Notes

Please contact RSA Customer Support should you have any difficulties or required further assistance with Restricted Access Times.