Describes how GlobalProtect integrates the RSA OTP soft-token
when signing in.
Software Support: Starting with GlobalProtect™
app 5.1.
OS support: Windows operating systems (requires
registry key changes)
To simplify the login process and improve
the users’ experience, GlobalProtect offers seamless soft-token
authentication with a two-factor authentication vendor such as RSA
SecurID. The user enters the RSA PIN in the GlobalProtect Password field,
and GlobalProtect retrieves the passcode from RSA and proceeds with
the connection without the user taking the extra step of opening
the RSA application.
With this change, users no longer need
a two-step process where they are required to first open their software
token app and enter their PIN to obtain a passcode, then enter the
passcode in their GlobalProtect app in the Password field.
Seamless
soft-token authentication is supported for all three RSA modes:
PinPad Style (PIN integrated with token code), Fob Style (PIN followed
by token code) and Pinless mode. For PinPad and Fob Style, the user
enters the PIN in the Password field and
GlobalProtect retrieves the passcode. In Pinless mode, the Password
field is grayed out and users enter their username.