To make Workspace ONE Access the authentication agent, the RSA SecurID security console must be configured with the host name and IP address of the Workspace ONE Access connector.


  • Verify that one of the following RSA Authentication Manager versions is installed and functioning on the enterprise network: RSA AM 6.1.2, 7.1 SP2 and later, and 8.0 and later. The Workspace ONE Access connector server uses AuthSDK_Java_v8.1.1.312.06_03_11_03_16_51 (Agent API 8.1 SP1), which only supports the preceding versions of RSA Authentication Manager (the RSA SecurID server). For information about installing and configuring RSA Authentication Manager (RSA SecurID server), see RSA documentation.


  1. On a supported version of the RSA SecurID security console, add the Workspace ONE Access connector host name and IP address as an authentication agent. Enter the following information.
    Option Description
    Hostname The host name of Workspace ONE Access connector.
    IP address The IP address of Workspace ONE Access connector.
    Alternate IP address If traffic from the connector passes through a network address translation (NAT) device to reach the RSA SecurID server, enter the private IP address of the appliance.
  2. Download the compressed configuration ZIP file and extract the sdconf.rec file.
    This file is uploaded when you configure RSA SecurID in the Workspace ONE Access console.

What to do next

Go to the Workspace ONE Access console Identity & Access Management > Setup > Enterprise Authentication Methods page to configure RSA SecurID (cloud deployment).