RSA support for CA SiteMinder

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

We're running a Policy Server 12.8SP2 on RedHat 7 and we'd like to
know if there's an Authentication Scheme for RSA as inbuilt
functionality ?

 

Environment

 

Policy Server 12.8SP2 on RedHat 7;

 

Resolution

 

At first glance, Policy Server 12.8SP2 offers as inbuilt RSA
ACE/Securid Authentication Scheme. You'll find details about it here :

  SecurID Authentication Schemes

    The RSA Ace/SecureID authentication schemes authenticate users
    logging in with ACE credentials, which include the user names, PINs,
    and TOKENCODEs. ACE user names and passwords reside in an ACE/Server
    user store, and an ACE/Server administrator can change these
    credentials. SecureID tokens generate single-use TOKENCODEs.

    [...]

  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/configuring/policy-server-configuration/authentication-schemes/securid-authentication-schemes.html

And the Policy Server 12.8SP2 supports the following RSA server
version :

  Symantec SiteMinder 12.8 Product Support Matrix

    5 Third-Party Product Compatibility

      The following table lists supported third-party products:

 | Product                    | Version |
 |----------------------------+---------|
 | RSA Authentication Manager |     8.3 |
 |                            |   8.2.x |
 |                            |   8.1.x |
 |                            |   8.0.x |

 p.13

      Applicable Support Notes:

      1. For RHEL 7 platform, note that RSA SDK support is from RHEL 7.1
  onwards. Hence policy server needs to be deployed on RHEL 7.1 or
  above, to use RSA SecurID authentication.

  https://ftpdocs.broadcom.com/cadocs/0/contentimages/Symantec%20SiteMinder_12_8_Platform%20Support%20Matrix_18September2020.pdf