Set the Authentication Method for the Self-Service Console

Users must provide credentials to access the Self-Service Console. If users are not required to have a password, configure one or more other credentials. You can configure one or more of the following types:

  • RSA Password. For users whose identity source is the Authentication Manager internal database. To use this credential, an RSA password must be assigned to the user’s account.

  • SecurID. For users who have SecurID authenticators.

  • On-Demand. For users who use on-demand tokencodes.

  • LDAP Password. For users whose identity source is an LDAP directory server.


  1. In the Security Console, click Setup > Self-Service Settings> Self-Service Console Authentication.

  2. In the Console Authentication Method field, enter the authentication method that users must use to log on to the Self-Service Console.

    For example, to require an on-demand tokencode and an LDAP password, enter OnDemand+LDAP_Password.

  3. Click Save.

After you finish

If you change the authentication method, notify the users because all users currently logged on to the Self-Service Console must re-authenticate using the new method.