RSA Cloud Plan Licenses
a month ago

RSA Cloud Plan Licenses

RSA offered three licenses: Cloud, Cloud Plus, and Cloud Premier.

For information about ID Plus plans, see ID Plus Subscription Plans.

The high-level details are described below:

Authentication Components

The following table shows the authentication software available with each license.

 Cloud Cloud PlusCloud Premier
Cloud Access Service (CAS)IncludedIncludedIncluded

Authentication Manager Server Enterprise License:

1 Primary Instance and up to 15 Replica Instances

 IncludedIncluded
AM server with AM Bulk Administration (AMBA) IncludedIncluded

Note:  RSA continues to support existing Authentication Manager Server Base and Enterprise licenses.

SecurID® Federal

RSA offers a FedRAMP-authorized version of the Cloud Plus and the Cloud Premier licenses. SecurID® Federal includes a separate cloud instance reserved for United States Federal Government customers and other authorized agencies.

SecurID® Federal does not support authentication with SMS OTP or Voice OTP.

Authentication Integrations

The following table shows the authentication integrations available with each license.

 Standard
Agents
RSA Ready
SecurID Agents
RADIUS AgentsSecurID 
Authentication API
SAML AuthenticationWeb Proxy
(Trusted Headers, Password Vaulting)
Cloud PremierIncludedIncludedIncludedIncludedIncludedIncluded
Cloud PlusIncludedIncludedIncludedIncludedIncluded 
Cloud  SAML-based only  Included 

Authentication Methods

The Cloud, Cloud Plus, and Cloud Premier licenses include the following authentication methods:

  • Approve (Push) notification through the RSA Authenticator App and wearable devices

  • One-Time Passcode (OTP) delivered on-demand through the RSA Authenticator App

  • Integrated SMS OTP and Voice OTP available as an add-on

  • Passwordless authentication through FIDO2 and Device Biometrics, such as Apple FaceID, Android biometrics and Windows Hello

  • Secure One-Time Passcodes using RSA hardware and software authenticator

  • Emergency Access Code

  • (Cloud Plus and Cloud Premier only) Customized authentication through the Mobile SDK

Deploying AM as the on-premises component of CAS provides failover and ensures high availability, including offline authentication. This deployment is an option for the Cloud Plus license and included in the Cloud Premier license.

Hardware authenticators are sold separately.

Access Components

CAS allows you to use specific attributes in access policy conditional expressions. These expressions are used to determine authentication requirements and who is allowed or denied access to resources. The following table shows which attributes are available with each license.

 

Cloud

Cloud Plus

Cloud Premier

My Page Attributes   
Customized SSO portal branding  xx
Access Policy Attributes   
Identity source attributes (used in rule sets to select target population for policy)xxx
IP address (conditional attribute)xxx

Additional conditional attributes:

  • Authentication Type

  • Authentication Source

  • Country

  • Known Browser

  • Trusted Location

  • Trusted Network

  • User Agent

 xx

Cloud Premier attributes include all attributes listed above and the following conditional attributes:

  • High-Risk User List

  • Identity Confidence

  x

Note:  Make sure that your ID Plus Subscription Plan includes Conditional Attributes. Edit the access policy if necessary to avoid authentication failures.