RSA SecurID
Enterprise MFA and identity assurance across cloud, hybrid, and on-premises environments
Founded
1982
Starting Price
$3
Category
Cybersecurity
Last updated August 17, 2026
About RSA SecurID
RSA SecurID is the multi-factor authentication and identity assurance line from RSA Security, built for banks, government agencies, and other high-assurance organizations that still run significant on-premises infrastructure. It combines hardware and software authenticators (SecurID 700 tokens, DS100, iShield Key 2, the RSA Authenticator App) with the on-premises RSA Authentication Manager server, and connects to the cloud-delivered RSA ID Plus platform for passwordless, SSO, and adaptive access. Its differentiator is hybrid failover: authentication keeps working on-premises when the cloud or the internet connection does not.
Pros & Cons
Pros
- Hybrid failover keeps authentication working during cloud outages or network disruptions, which almost no cloud-first identity provider offers
- Unusually broad authenticator range in one contract: OTP hardware tokens, FIDO2 keys, push, biometrics, QR code, and offline codes
- Deep coverage of on-premises and legacy estates (RADIUS, VPNs, Linux, macOS, web proxy) that SaaS-only IdPs tend to skip
- Purpose-built for regulated sectors, with public-sector and financial-services deployments and NIST CSF 2.0 alignment
- Layers on top of Microsoft Entra ID via the M1 plan and External Authentication Methods instead of forcing a rip-and-replace
Key Features
Hybrid authentication failover
Cloud MFA that fails over to on-premises RSA Authentication Manager, so users keep authenticating during cloud outages or network disruptions. RSA markets this as the only hybrid failover authentication platform on the market.
RSA Authentication Manager
The on-premises authentication, access, and management server behind SecurID, securing users, applications, data, and services inside the firewall. Also deployable on the security-hardened SecurID Hardware Appliance.
Hardware authenticators
SecurID 700 OTP tokens, DS100 hybrid authenticators, and the iShield Key 2 FIDO2 series, procured from the same vendor as the platform rather than a third party.
RSA Authenticator App
Mobile software authenticator supporting push approval, OTP, biometrics, Windows QR-code sign-in, and offline authentication when the device has no connectivity.
Passwordless and FIDO2
FIDO2 security keys and passkeys, biometrics, and QR-code authentication for phishing-resistant sign-in across cloud, hybrid, and on-premises resources, including Linux and macOS endpoints.
RSA Risk AI
Machine-learning risk engine that scores dozens of behavioral characteristics and business context in real time to decide whether a session needs step-up authentication. Available only in the top ID Plus E3 plan.
Pricing
ID Plus C1 (Cloud IAM)
$3/user/month
- Cloud-only deployment
- Modern MFA with FIDO, biometrics, and Windows QR code
- Self-service enrollment and credential management
- Federation, SAML 2.0, and OIDC integrations
- Basic 9x5 support
Best For
MFA for regulated, high-assurance organizations
Banks, government agencies, and healthcare systems that need audited, standards-aligned authentication with hardware token options and both cloud and on-premises coverage.
Resilience layer for Microsoft Entra ID
Organizations standardized on Entra ID add RSA as an external authentication method so sign-in survives a Microsoft outage and legacy apps Entra cannot reach stay protected.
Securing legacy and on-premises access
VPNs, RADIUS-based network gear, Linux and macOS logins, and internal applications that predate SAML get modern MFA without being migrated to the cloud first.
