Windows Routing and Remote Access Service - RSA Ready Implementation Guide
6 months ago

Certified: August 27, 2025
     

Solution Summary

This article describes Windows Routing and Remote Access Service (RRAS) integration with RSA ID Plus. Use this information to determine which use case and integration type your deployment will employ.
    

Use Case

Windows RRAS can be integrated with RSA using RADIUS. When integrated, Windows RRAS users must authenticate with RSA to sign in to Windows RRAS.
       

Integration Types 

RADIUS integrations provide a text-driven interface for RSA within the partner application. RADIUS provides support for most RSA authentication methods and flows.

              

Supported Features 

This section shows all the supported features by integration type and by RSA components. Use this information to determine which integration type and RSA component your deployment will use. The next section in this guide contains the instruction steps for how to integrate RSA with Windows RRAS using each integration type. 
    

Windows RRAS Integration with Cloud Access Service (CAS)

Authentication MethodsRSA MFA API (REST)RADIUSRelying PartyMy Page SSO
Approve- --
LDAP Password--
SecurID OTP- 
Authenticate OTP- 
Device Biometrics- 
SMS OTP- 
Voice OTP- 
FIDO Security Key--
QR Code--
Emergency Access Code- 

  

Windows RRAS Integration with Authentication Manager (AM)

Authentication MethodsRSA MFA API (REST)RADIUSAuthentication Agent
RSA SecurIDn/t n/t
On Demand Authentication---
Risk-Based Authenticationn/tn/tn/t

 

Supported
-Not supported
n/tNot yet tested or documented, but may be possible
n/aNot applicable

    

Configuration Summary

This section contains instruction steps that show how to integrate Windows RRAS with RSA for cloud administrators using all of the integration types.
This document is not intended to suggest optimum installations or configurations. It is assumed that the reader has both working knowledge of all products involved, and the ability to perform the tasks outlined in this section. Administrators should have access to the product documentation for all products to install the required components.
All RSA and Windows RRAS components must be installed and working prior to the integration.
All the supported use cases of RSA with Windows RRAS require both server-side and client-side configuration changes. This section of the guide includes links to the appropriate sections for configuring both sides for each use case.
   

Integration Configuration

CAS

                  

      AM

             

        RSA Terminology Changes

        The following table describes the differences in the terminologies used in the different versions of RSA products and components. 

        Previous VersionNew VersionExamples/Comments
        Cloud Authentication ServiceCloud Access Service
        Token

        OTP CredentialSecurID OTP Credential
        AuthenticatorHardware Authenticator
        Tokencode

        OTPSecurID OTP, SMS OTP, Voice OTP
        Access CodeEmergency Access Code
        SecurID Authenticate appRSA Authenticator appRSA Authenticator app for iOS and Android, RSA Authenticator app for Windows
        DeviceAuthenticatorRegister an authenticator
        Company IDOrganization ID 
        AccountCredential 
        Device Serial NumberBinding ID 

                

        Certification Details

        CAS

        Windows RRAS

        AM

            

        Known Issues

        No known issues.