Configuring RSA SecurID Authentication

October 5, 2020

Contributed by:

When configuring the RSA/ACE server for RSA SecureID authentication, you need to complete the following steps:

Configure the RADIUS client with the following information:

Provide the name of the NetScaler Gateway appliance.
Provide a description (not mandatory).
Provide the system IP address.
Provide the shared secret between NetScaler Gateway and the RADIUS server.
Configure the make/model as Standard RADIUS.

In the agent host configuration, you need the following information:

Provide the fully qualified domain name (FQDN) of NetScaler Gateway (as it appears on the certificate bound to the virtual server). After providing the FQDN, click the Tab key and the Network Address window populates itself.

After you enter the FQDN, the network address automatically appears. If it does not, enter the system IP address.
Provide the Agent Type by using Communication Server.
Configure to import all users or a set of users who are allowed to authenticate through NetScaler Gateway.

If it is not already configured, create an Agent Host entry for the RADIUS server, including the following information:

Provide the FQDN of the RSA server.

After you enter the FQDN, the network address automatically appears. If it does not, provide the IP address of the RSA server.
Provide the Agent Type, which is the RADIUS server.

For more information about configuring an RSA RADIUS server, see the manufacturer’s documentation.

To configure RSA SecurID, create an authentication profile and policy and then bind the policy globally or to a virtual server. To create a RADIUS policy to use RSA SecurID, see Configuring RADIUS Authentication

After creating the authentication policy, bind it to a virtual server or globally. For more information, see Binding Authentication Policies.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring RSA SecurID Authentication

October 5, 2020

Contributed by:

October 5, 2020

Contributed by:

Configuring RSA SecurID Authentication

In this article