User Application Portal

In an IDR SSO Agent deployment, you can configure a user application portal to help users find and access protected applications. The portal provides links to available applications and helps handle user authorization required to access those applications. Users can sign in to the portal if they are synchronized with the CAS and are enabled. Users can only see those applications they are authorized to use. Access policies determine which applications users can access. You can optionally configure the Portal Multifactor Authentication Policy if you require users to provide step-up authentication during signing in to the portal.

The RSA Application Portal is provided out-of-the-box and is a web application that runs on the identity router and needs very little configuration to set up. The RSA Application Portal provides basic functionality, but does not support extensive customization.

A custom portal can be developed to create your own portal experience for web application users, or to integrate single sign-on (SSO) applications with an existing user portal that is already deployed within your company. Web developers create the custom portal using common scripting languages (for example .php or .jsp). The RSA ID Plus IDR SSO Agent Custom Web Portal Developer's Guide is provided to help you get started.

At least one application must be configured for SSO, added to My Applications in the Cloud Administration Console, and published before users can sign into the application portal. All user interactions with either portal type are passed to the identity router which also handles authorization to the application.

For configuration instructions, see:

• Configure the Standard Web Application Portal

• Configure the Standard Web Application Portal

• Configure a Custom Portal Page for Web Applications

Next topics:

• Using Custom Settings in Your Cloud Access Service Deployment

• User Session and Single Sign-On

• Develop Custom Web Portal (PDF)