@DeanIacovone1 (Customer)​ ,

Which RSA Authentication Agent are you configuring?

With an agent installed on a machine, you will be prompted for both your RSA passcode and your AD password. If you have Windows Password Integration enabled, you will enter your AD password once. The password is stored in the Authentication Manager database. The next time your user logs in, they enter their RSA passcode. Authentication Manager then sends the Windows password to the OS to complete the login.

To enable Windows Password Integration,

1. Login to your Security Console.
2. Navigate to Authentication > Policies > Offline Authentication Policies > Add New or Manage Existing then choose Edit.
3. Check the option to enable Windows Password Integration.
4. Click Save.
5. To test, try authenticating through the agent two or three times to see that the password is cached and does not need to be reentered.

Note that when your end user's password changes, Authentication Manager will try to use the cached password. It will fail and then the agent will ask for the new password which is then updated in the database. More detailed information on Windows Password Integration can be found in the online help in the Security Console and in the RSA Authentication Agent 7.4 Installation and Administration Guide.

You can enable Windows Password Integration system-wide, on an individual agent basis, or by groups. For example, to enable it on an authentication agent, you create an agent record in the Authentication Manager database. You can enable Windows Password Integration for all of the authentication agent computers in the database or select certain computers.

If you are seeing any behavior that you do not think is correct, please enable tracing on your agent, as documented on page 74 of the RSA Authentication Agent 7.4 Installation and Administration Guide to see what we are capturing. Also check the Windows Event Viewer for any errors or warnings. We would also like to see the authentication activity report from your Authentication Manager with corresponding time stamps. If you run into any issues, please contact RSA Technical Support for assistance.