ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

RSA support for CA SiteMinder

book

Article ID: 200720

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On Agents (SiteMinder) CA Single Sign On Federation (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) SITEMINDER

Issue/Introduction

 

We're running a Policy Server 12.8SP2 on RedHat 7 and we'd like to
know if there's an Authentication Scheme for RSA as inbuilt
functionality ?

 

Environment

 

Policy Server 12.8SP2 on RedHat 7;

 

Resolution

 

At first glance, Policy Server 12.8SP2 offers as inbuilt RSA
ACE/Securid Authentication Scheme. You'll find details about it here :

  SecurID Authentication Schemes

    The RSA Ace/SecureID authentication schemes authenticate users
    logging in with ACE credentials, which include the user names, PINs,
    and TOKENCODEs. ACE user names and passwords reside in an ACE/Server
    user store, and an ACE/Server administrator can change these
    credentials. SecureID tokens generate single-use TOKENCODEs.

    [...]

  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/configuring/policy-server-configuration/authentication-schemes/securid-authentication-schemes.html

And the Policy Server 12.8SP2 supports the following RSA server
version :

  Symantec SiteMinder 12.8 Product Support Matrix

    5 Third-Party Product Compatibility

      The following table lists supported third-party products:

 | Product                    | Version |
 |----------------------------+---------|
 | RSA Authentication Manager |     8.3 |
 |                            |   8.2.x |
 |                            |   8.1.x |
 |                            |   8.0.x |

 p.13

      Applicable Support Notes:

      1. For RHEL 7 platform, note that RSA SDK support is from RHEL 7.1
  onwards. Hence policy server needs to be deployed on RHEL 7.1 or
  above, to use RSA SecurID authentication.

  https://ftpdocs.broadcom.com/cadocs/0/contentimages/Symantec%20SiteMinder_12_8_Platform%20Support%20Matrix_18September2020.pdf