RSA Authentication Manager 7.1 Installation and Configuration Guide

RSA Authentication Manager 7.1 Installation and Configuration Guide
Supported Data Stores
You can store data in:
• The internal database
• One or more LDAP directories (called an identity source within Authentication
Manager)
If you use the Authentication Manager internal database only, it contains all user, user
group, policy, and token data. If you integrate Authentication Manager with external
identity sources, only user and user group data reside in the external identity source.
Policy and token data are stored in the Authentication Manager internal database.
Internal Database
Authentication Manager is installed with an internal database. The internal database
contains all application and policy data, and you can choose to store user and user
group data in it.
Identity Sources
Authentication Manager supports the use of an external LDAP directory for user and
user group data.
Supported LDAP directories are:
• Sun Java System Directory Server 5.2, SP3
• Microsoft Active Directory 2003, SP2
Note: Active Directory Application Mode (ADAM) is not supported.
Sun Java System Directory Server can be located on the same machine as
Authentication Manager or on a different machine. When the Sun Java System
Directory Server is not on the same machine, a network connection between the two
machines is required. Active Directory must be located on a different machine.
Authentication Manager LDAP integration does not modify your existing LDAP
schema, but rather creates a map to your data that Authentication Manager uses.
RSA requires SSL for LDAP connections to avoid exposing sensitive data passing
over the connection. For example, if bind authentications are performed over a
non-SSL connection, the password is sent in the clear. The use of SSL-LDAP requires
that the appropriate certificate is accessible by Authentication Manager.
1: Preparing for Installation 15