October 28, 2021

Required Identity Router Updates Must be Completed by October 31, 2021

To strengthen overall security, SecurID has rolled out significant improvements that harden identity routers to meet Security Technical Implementation Guide (STIG) standards. You must update your identity router software version to 12.12.x and the operating system from SLES 11 SP4 to SLES 12 SP5. To view identity router version and operating system information, see View Identity Router Status in the Cloud Administration Console.

If your identity routers meet all three of the following criteria, you must replace them by October 31, 2021 with a new image downloaded from the Cloud Administration Console:

• 10 GB disk space or the identity router is embedded in Authentication Manager
• SLES 11 operating system
• Identity router version prior to 12.12

No additional updates are available for these identity routers, likely resulting in future compatibility issues. Perform the streamlined swap and replace procedure described in the Identity Router 12.12.x Migration Guide. 

Automatic Unlock for Tokencodes

End users will no longer have to call their IT Help Desk to unlock their tokencodes. You will be able to configure the Cloud Authentication Service to automatically unlock tokencodes after a specified period of time has elapsed. Each tokencode will be locked and unlocked separately.

Multiple SecurID 700 Hardware Tokens Supported for Cloud Authentication Service

Support for multiple SecurID 700 cloud managed hardware tokens per user achieves a higher level of security. You can  meet organizational boundaries by segmenting access to certain air-gapped applications with one token and accessing other applications with a different hardware token. This support also provides a user backup/stand-by for authentication.

Just-in-Time Synchronization Always On

Just-in-time synchronization instantaneously allows new users to authenticate with SecurID and prevents disabled users from doing so. In the October release, just-in-time synchronization will replace scheduled synchronization to prevent artificial delays from scheduled synchronization intervals. Scheduled bulk synchronization will be removed and just-in-time synchronization will always be active. You will still be able to manually synchronize identity sources on-demand.

SecurID Authentication Agent 8.1.4 for PAM for Solaris x86

SecurID Authentication Agent 8.1.4 for PAM adds support for Solaris 11.4 x86 (64-bit) and upgrades the third-party components used by Solaris 10.11 x86 (32-bit) and Solaris 11.4 x86 (32-bit and 64-bit). Other operating systems, such as AIX, Solaris SPARC and RHEL, are not updated by this release. For more information, see the Release Notes.

How Do You Use Web Agents? Let us Know!

We want to learn more about how you currently use RSA SecurID Authentication Agent for Web so we can better understand which use cases will be relevant in the future. These insights will greatly help us continue to align our products to best suit your strategic initiatives. Click here to take a quick survey: https://rsa-ux.optimalworkshop.com/questions/1g2dp4w6.

New and Updated Third-Party Integrations from RSA Ready

The following integrations were recently completed by RSA or certified by RSA through the RSA Ready Technology Partner Program. For Implementation Guides, see SecurID Access Integrations.

• Broadcom Symantec Encryption Management Server (update, SecurID Authentication Manager and Cloud Authentication Service) – Console that manages the applications that provide email, disk and network file encryption. Added Cloud Authentication Server support through the RADIUS protocol.
• Google Workspace (update, Cloud Authentication Service) – Productivity and collaboration tools from Google. Updated Cloud Authentication Service support through SAML.
• Microsoft ADFS (update, Cloud Authentication Service) - Federated single sign-on portal. Added support for Relying Party through SAML.
• Okta SSO (update, Cloud Authentication Service) – Federated single sign-on portal. Updated to use SecurID as identity provider for step-up authentication through SAML.

Subscribe to status.securid.com for Cloud Authentication Service Status Updates

For information about all service incidents and scheduled maintenance windows for the Cloud Authentication Service, subscribe to https://status.securid.com.

Sneak Preview – Coming Soon!

Authenticators Unite – SecurID App 4.0 is Coming!

The SecurID app for iOS and Android will soon add MFA functions from the RSA SecurID Authenticate 3.9.x app to the existing SecurID Token capabilities. This merger simplifies the management complexities of your hybrid deployment and minimizes user disruption as you plan cloud-only migration with the same authenticator app. For more information, see this advisory.