RSA Authentication Manager 7.1 Administrator's Guide - IT Services ...

RSA Authentication Manager 7.1 Administrator’s Guide
Providing Users with Fixed Passcodes
You can assign a fixed passcode to users, which allows them to authenticate without
an RSA SecurID PIN and tokencode. Instead, users enter their fixed passcode to gain
access to the resources protected by Authentication Manager.
Important: Fixed passcodes are essentially passwords, and are not recommended as
they eliminate all of the benefits of two-factor authentication. Use fixed passcodes
only in test environments and in situations when users are authenticating to
authentication agents within the corporate firewall.
To use the Security Console to set a fixed passcode, use the Fixed Passcode field on
the Authentication Settings page. The Authentication Settings page is accessed
through the user Context menu.
For instructions, see the Security Console Help topic “Managing Fixed Passcodes.”
Clearing Incorrect Passcodes
The system counts each time the assigned user enters an incorrect passcode, clearing
this count automatically with each correct passcode. If a user enters more incorrect
passcodes than are allowed by the SecurID Token policy and then enters a correct
passcode, the user is prompted for his or her next tokencode. If you do not want a user
to be prompted for the next tokencode, you can use the Security Console to clear
incorrect passcodes. Select Clear Incorrect Passcodes on the Authentication Settings
page (this page is accessed through the user Context menu).
When you select this checkbox, the user is not prompted for the next tokencode on his
or her next authentication attempt. Keep in mind, however, that if the user exceeds the
number of failed logon attempts allowed by the lockout policy, the user is locked out
of the system.
This operation only clears the existing count. To clear future counts, you must perform
the procedure again.
For instructions, see the Security Console Help topic “Manage User Authentication
Attributes.”
Designating a Default Shell for UNIX Users
The default shell is the shell the user logs on to when accessing a UNIX machine.
To use the Security Console to assign a default shell, use the Default Shell field on the
Authentication Settings page. The Authentication Settings page is accessed through
the user Context menu.
For instructions, see the Security Console Help topic “Manage User Authentication
Attributes.”
106 4: Administering Users