Canon Authorized Send - RSA MFA API (REST) Configuration - RSA Ready Implementation Guide
2 years ago
This article describes how to integrate Canon Authorized Send with RSA Authentication Manager using REST API.
  

Configure RSA Authentication Manager

Perform these steps to configure RSA Authentication Manager using REST API.
Procedure
  1. Log in to Security Console.
  2. To add a new agent host, click Access > Authentication Agents > Add New.
  3. Enter all the required information. Designate a hostname that will be used in Canon Authorized Send configuration later.                               image.png
  4. Navigate to Setup > System Settings > RSA SecurID Authentication API and activate Enable Authentication API to allow the use of the REST API.
  5. Copy the Agent Credentials that will be used in the Canon Authorized Send configuration later.
  6. Set the port to be used. (Default is 5555.)                                                                                                                                                      image.png
  

Notes

Default Authentication Agents are generated, and administrators may choose to use defaults instead of creating a new one. Save the hostname for Canon Authorized Send configuration.
image.png

  

Configure Canon Authorized Send

Perform these steps to configure Canon Authorized Send.
Procedure
  1. Log in to the Authorized Send configuration page using the link - http://{DEVICE_IP_ADDRESS}:8443/AuthSendConfiguration.
  2. Under Authentication, click Add to create an RSA authentication server instance.
  3. Select the RSA SecurID option in the Method drop-down list.
  4. Fill in the information with the values obtained from the RSA Authentication Manager configuration into the respective fields.
    1. RSA Server: Provide the FQDN of the RSA Authentication Manager instance. If unavailable, use the IP address. This information can be found in the RSA Security Console under Home > Software Version Information > Hostname.
    2. Port: Port which was set during RSA Authentication Manager configuration.
    3. Agent Name: Value is the hostname of the Authentication Agent set during RSA Authentication Manager configuration.
    4. Access ID: It is part of the Agent Credentials copied during the RSA Authentication Manager configuration.
    5. Access Key: It is part of the Agent Credentials copied during RSA Authentication Manager configuration. 
  5. (Optional) If AD authentication is enabled, select a Kerberos authentication server to use. The server must be defined to use this option.
  6. (Optional) Once AD authentication is configured, the administrator may choose to provide administrator account credentials so that Authorization Send will use a system account for shared drive and email retrieval.                                                                                        image.png
The login page displays the User Name and Passcode fields. When AD Authentication is enabled and no system account is configured, a Password field is also displayed.
image.png
image.png


The configuration is complete.
Return to Canon Authorized Send - RSA Ready Implementation Guide.