Rsa Securid Token Servers - Cisco 3.3 User Manual

Token Server User Databases
Step 9

RSA SecurID Token Servers

Note
User Guide for Cisco Secure ACS for Windows Server
13-84
You should only use the From Token Server (async tokens only)
Note
option if all tokens submitted to this token server are asynchronous
tokens.
Click Submit.
Cisco Secure ACS saves the RADIUS token server database configuration you
created. You can add it to your Unknown User Policy or assign specific user
accounts to use this database for authentication. For more information about the
Unknown User Policy, see
more information about configuring user accounts to authenticate using this
database, see Chapter 7, "User
Cisco Secure ACS supports ASCII, PAP, and PEAP(EAP-GTC) authentication for
RSA SecurID token servers. Other authentication protocols are not supported
with RSA SecurID external user databases.
Authentication protocols not supported with RSA SecurID databases may be
supported by another type of external user database. For more information about
authentication protocols and the external database types that support them, see
Authentication Protocol-Database Compatibility, page
Cisco Secure ACS supports mapping users authenticated by a RSA token server
to a single group. For more information, see
Database, page 16-2.
Cisco Secure ACS supports PPP (ISDN and async) and Telnet for RSA SecurID
token servers. It does so by acting as a token-card client to the RSA SecurID token
server. This requires that RSA token-card client software must be installed on the
computer running Cisco Secure ACS. The following procedure includes steps
required to install the RSA client correctly on the computer running Cisco Secure
ACS.
About Unknown User Authentication, page
Management".
Group Mapping by External User
Chapter 13 User Databases
15-4. For
1-10.
78-16592-01