Forum Discussion
NimbostratusF5 APM with RSA Adaptive Auth
I am trying to figure out if F5 APM can be integrated with RSA Adaptive Auth. What is required? How difficult is it? I understand that RSA professional services need to get involved, is that true? does the client purchase hardware?
Any help would be awesome!
19 Replies
Jason_19901Bump
Anyone ever integrated this?
HamishCirrocumulus
I've not heard of anyone doing it...
But that may not mean much :)
H- Jason_19901I know RSA has the chops, they want to charge 100k for 18 weeks of pro services.
Dennis_Andrade_That's what our company does. We have developed a F5 APM adapter that integrates with AA Adaptive Auth. Visit our website at for more information:
http://www.thescegroup.com
- JeffH_39464You call that a website? :-)
travis99_94012Cirrus
We have tested this integration and it works. Basically you download the integration script from your RSA console (version 8+), insert the code into your login page on F5 to redirect to your RSA web tier, then RSA passses a pass/fail to F5 to log you in.
Cory_Z_134877How much did the script cost you? Is the only choice to buy it from a 3rd party? Does RSA support this script?
- travis99_94012
The script is available on our RSA console, so however much we paid for our RSA tokens. I would assume RSA supports the script. It's written for version 10.x but we're running 11.4.1 without issue.
- Cory_Z_134877
Tahnks, that is good to know, so the bulk of the work for AA is done on the RSA server, not the f5? I assume you got the script from SCE group.
SCE is the F5 Partner for Adaptive Auth
http://www.f5.com/products/technology/sce/
- travis99_94012
and yes, the authentication is done by the RSA web tier
James_124437What happens to the credentials used for auth? Can you still handle SSO with APM?- travis99_94012The only option I've found is to have a secondary login page with password entry for the F5 to store it for SSO. I'm sure there's probably another way, but that's what I've gotten to work.
