RSA SecurID

When RSA SecurID is enabled, users can use the RSA security console's security codes for identity verification while logging in to ADAudit Plus.

Steps to add the ADAudit Plus server in the RSA admin console

1. Log in to your RSA admin console (e.g., https://RSA machinename.domain DNS name/sc).
2. Go to the Access tab, select Authentication agent from the drop-down, and click Add new.
3. Create a Client, and set its type as Standard Agent.
4. Go to the Home tab, select Manage Users, and click Add new.
5. Create a user with a last name and a user ID similar to the SAM Account name in the domain.
6. After adding the user, click the username, and in the menu, select Secure ID Token.
7. Click Assign Token, select any one token, click Assign, and click Save.
8. Go to the Authentication tab, click On Demand Authentication, and select Enable Users.
9. Select the User from the list, and click Enable for ODA.
10. Select the associated pin and expiration date, and click Save.
11. Go to the Access tab, and select Authentication agent from the drop-down.
12. Click Generate Configuration File, select Generate Config File, and click Download now.
13. Extract the AM_Config.zip file to get the sdconf.rec file.

Steps to enable RSA SecurID in ADAudit Plus

1. Open the ADAudit Plus web console.
2. Navigate to Admin → Administration → Logon Settings, and select Two-Factor Authentication.
3. Under RSA SecurID, check Enable RSA SecurID.
4. Browse and select the sdconf.rec file downloaded from the RSA Authentication Manager Server.
5. Click Save.