RSA Authentication Manager cannot connect to any identity routers. Authenticate Tokencodes are not available.

[#1]

Article Number

000035276

Applies To

RSA Product Set: SecurID Access

Issue

As an RSA Authentication Manager Operations Console administrator you are configuring the Authentication Manager to accept Authenticate App tokencodes.

The following error is displayed when clicking the Test Connection button:
 

There was a problem processing your request
Authentication Manager cannot connect to any identity routers.  Authenticate Tokencodes are not available.

The Identity Router's /var/log/symplified/symplified.log contains the following error:
 

2017-06-15/18:28:46.196/UTC [ajp-apr-8009-exec-9] ERROR com.symplified.application.appliance.api.authorization.IpAddressChecker[33] - unable to create an ip network range from ip address and netmask
com.symplified.service.shared.utility.IpUtilException: Argument did not split into 4 parts:
 

Cause

A value for Allowed Networks has not been entered for the Identity Routers' API Configuration.  This setting must be populated to enable the IDR to accept authentication API messages from Authentication Manager.
 

Image description

Resolution

Define the Authentication Manager IP address and netmask as described in Step 4 of the documentation on how to Enable Access to the Identity Router API. 

 

Notes

All Authentication Manager IPs or a range of IPs that include all Authentication Managers must be defined.