Educause Security Discussion mailing list archives

RSA AD Intergration


From: "Rose, Ryan" <Ryan.Rose () UNCO EDU>
Date: Mon, 11 Dec 2006 12:39:22 -0700

All,

 

We have implemented RSA two-factor authentication to our AD controllers
and other domain servers.  We have implemented domain integration so
activities such as "run-as" are a token challenged activity.  We have
been notified by RSA that the domain integration component is under
review and is tentatively schedule to be removed (unsupported) 4th qtr
2007.  Is anyone else utilizing RSA two-factor domain integration?  If
so what is your migration plan if they stop supporting the current
integration component.  We have discussed the option of moving to a
client install on the server, but from an overall accessibility
standpoint this does not protect the run-as type of activity from taking
place by someone without a token.  I'm curious to hear how others have
implemented and what challenges you have faced.

 

Thanks in advance for the responses,

 

Ryan


Current thread: