Why use RSA SecurID Access AD FS SAML integration rather than the RSA Authentication Agent for Microsoft AD FS
Originally Published: 2018-11-06
Article Number
Applies To
Issue
- RSA Authentication Agent for Active Directory Federation Services (AD FS)
- SAML integration with the RSA Cloud Authentication Service
Resolution
However, there are some situations where SAML integration may be the better choice:
- Require SecurID as the primary authentication method and AD FS is running on Windows Server 2012 or 2016 (the agent can only provide additional/secondary authentication unless AD FS is running on Windows Server 2019 or later).
- Require FIDO token authentication (FIDO is not supported by the agent).
- Prefer not to install and maintain additional software on your AD FS server(s). The agent must be installed on each AD FS server in your server farm.
Related Articles
Troubleshooting RSA MFA Agent for Microsoft AD FS 67Number of Views Authentication context not added / Context validation failed errors authenticating with RSA Authentication MFA Agent for A… 188Number of Views RSA MFA Agent 3.0.3 for Microsoft AD FS Release Notes 37Number of Views RSA MFA Agent 3.0 for Microsoft AD FS Administrator's Guide 427Number of Views Server certificate validation error when trying to authenticate using the RSA Authentication Agent 2.0 for AD FS 324Number of Views
Trending Articles
RSA Authentication Manager 8.9 Release Notes (January 2026) AFX Server stuck in 'Not running' State, with error 'timed out waiting for AFX applications to start' Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to obtain the bundle logs from an RSA Cloud Authentication Service Identity Router RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?