AnsweredAssumed Answered

What API option(s) exist outside of Authentication Manager and the Cloud Auth Service?

Question asked by Josh Cole on May 29, 2019
Latest reply on May 31, 2019 by Piers Bowness

Like • Show 0 Likes0
Comment • 4

Hello,

We have not purchased Authentication Manager, nor the Cloud Auth Service. RSA SecurID for us is on prem.

I believe there is a SecurID API that can be leveraged (that does not require AM or the Cloud Auth Service) because we have tools in our environment that have out of the box connector's for RSA SecurID and have been integrated with SecurID for MFA. I do not know exactly how they are integrating.

I have a custom web application that I need to intregrate with SecurID for MFA token authentication. Can someone point me towards the documentation that will allow me to do this? Everything I've found seems to be strictly related to products that do not exist in our environment.

Thanks for any help/direction!

No one else has this question

Outcomes

4 Replies

Ted Barbour May 30, 2019 9:13 AM
Mark Correct
Correct Answer
Hi Josh - can you define what you mean by "RSA SecurID for us is on prem" ? If you don't have Authentication Manager or the SecurID Access Cloud Authentication Service which RSA product are you using?
Like • Show 0 Likes0
Actions
- Jay Guillette @ Ted Barbour on May 31, 2019 1:38 AM
  Mark Correct
  Correct Answer
  If on-prem means you have Authentication Manager, which at AM 8.x is an Appliance that runs a Web Logic Server on Suse Linux, the Admin API lets you do things you would normally do through the AM security Console; add users, assign tokens, create agents...
  There are a couple of Agent APIs, the original UDP agents, a TCP agent and a TCP ReST agent API, so that you could create your own custom agent.
  But all these APIs allow you to program against the product of Authentication Manager. There is no roll your own Authentication product. The SecurID Authentication Engine, SAE is a kind of very stripped down AM product, which customers would use some of the APIs to roll their own Authentication System with Tokens, but SAE is a product.
  1 person found this helpful
  Like • Show 1 Like1
  Actions
Jay Guillette May 31, 2019 2:00 PM
Mark Correct
Correct Answer
There is an RSA product called Adaptive Authentication, AA which can be purchased either for on-premises installation or as a service. That might be confused for SID Access Authentication Manager appliance versus SID Access Cloud Access Server, CAS which has an Identity Router, IDR
Like • Show 0 Likes0
Actions
Piers Bowness May 31, 2019 3:27 PM
Mark Correct
Correct Answer
I would recommend you look at RSA SecurID Authentication API Developer's Guide (DOC-75741). This would be the best interface for new development. The interface is defined as an OpenAPI schema which can be used to generate bindings for a number of languages. A Java "test authentication" sample application is included with the servers "Extras" DVD image.

As also mentioned here, there is a legacy RSA Authentication SDK supporting legacy UDP authentication. This interface is fine for simple SecurID authentication, but it does not provide an optimal interface for modern authentication requirements. I would strongly recommend looking at the OpenAPI interface.
Like • Show 1 Like1
Actions

What API option(s) exist outside of Authentication Manager and the Cloud Auth Service?

Outcomes

Related Content

Recommended Content