Configuring the RSA Authentication Agent for Web for IIS with the ISAPI Redirector
2 years ago
Originally Published: 2014-02-06
Article Number
000065389
Applies To
RSA Product SetSecurID
RSA Product/Service TypeRSA Authentication Agent for Web for IIS
RSA Version/Condition7.1.3
Platform 
Platform (Other) 
O/S Version 
Product Name 
Product DescriptionAuthentication Agent
Issue
No SecurID logon prompt is displayed for the protected resource where it is protected with an RSA Authentication Agent for Web for IIS and where the ISAPI redirector (isapi_redirect) has been enabled.
SecurID logon prompt is displayed after the  ISAPI redirector (isapi_redirect) has been disabled.
Cause
URLS that should be directed to the RSA Component are incorrectly being sent to the tomcat redirector and so the web agent does not work
Resolution
The ISAPI redirector is the creation of Apache and the IIS Howto is available from URL https://tomcat.apache.org/connectors-doc-archive/jk2/jk/iishowto.html

The ISAPI redirector uses a file that maps URL-Path patterns to workers, usually called 'uriworkermap.properties'. In the 'uriworkermap.properties' file add the following line:
!/WebID/*=<worker_name>

..where the <worker_name> is replaced by the actual name of the worker process as defined in the workers.properties file. This will tell the ISAPI redirector not to redirect any URLs destined for the RSA Authentication Agent for Web for IIS.