Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring Global Settings > Configuring two-factor authentication > How RSA SecurID authentication works
How RSA SecurID authentication works
Security Manager Help | Web, Data, and Email Protection Solutions | v8.4.x
When you enable RSA SecurID authentication on the Two-Factor Authentication page, the logon process for an administrator accessing the Security Manager URL is as follows:
1.
The Security Manager detects that RSA SecurID authentication is enabled and available, and displays the RSA version of the logon screen. (The "Forgot my password" link on this screen does not apply to SecurID passcodes.)
2.
Administrators provide their two-factor authentication credentials as defined by their organization. For example:
*
The SecurID user name might be the administrator's email address or network logon name.
*
The passcode is usually a PIN combined with a token code supplied by a separate hardware or software token; the format depends on each organization's configuration.
3.
The authentication mechanism searches the local repository for a user profile that matches the user name provided. If there is no match, the search is repeated in the directory service. If a network user is found, the Security Manager looks for groups that have been assigned permissions in the system, and if an intersection is found between the groups, the RSA logon proceeds.
4.
The Security Manager custom agent checks the SecurID user name and the passcode against the Authentication Manager. If authentication fails, the authentication request falls back to Security Manager administrator credentials if configured; otherwise the administrator cannot log on.
The custom agent supports the creation of a new PIN, if required, as part of the authentication process. This might be entered by the administrator or generated by the system. If applicable the security criteria for the PIN are displayed on screen.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring Global Settings > Configuring two-factor authentication > How RSA SecurID authentication works
Copyright 2017 Forcepoint. All rights reserved.