Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry Work 3.18
  3. BlackBerry Work, Notes, and Tasks Administration Guide for BlackBerry UEM
  4. Managing BlackBerry Work
  5. Configure RSA SecurID soft token authentication

Configure RSA SecurID soft token authentication

BlackBerry Work
 for
iOS
 and
Android
 devices supports RSA SecurID soft token authentication. The software consists of an app and a separately installed, software-based security token that transfers password protection to
BlackBerry Work
.
BlackBerry Work
 contains an embedded RSA SecurID authenticator that can generate and display a 6-digit or 8-digit token code at 30 and 60 second intervals.
To use the RSA SecurID software token app for authentication,
BlackBerry Work
 must be configured to support RSA token import using the Compressed Token Format (CTF) URL.
  • Verify that the RSA SecurID Software Token app is installed on the device. If the RSA SecurID app is not installed, the device OS displays an error or redirects the user to the
    Apple
    App Store
     or
    Google Play
     Store.
  • Verify that you have provisioned the RSA SecurID software token for the user.
  • Verify the URL scheme for your users’ devices:
    • iOS
       and
      iPadOS
       devices: com.rsa.securid://ctf/?ctfData=TOKENDATA
      In the steps below, you will send a SDTID file to users’ devices.
    • Android
       devices: http://127.0.0.1/securid/ctf?ctfData=TOKENDATA
      In the steps below, you will send the seed record token data to users' devices. If you have a SDTID file, you must convert it to a CTF format. For more information, see RSA SecurID Software Token Converter Documentation.
  1. In the
    BlackBerry UEM
     management console, on the menu bar, click
    Apps
    .
  2. Search for and click
    BlackBerry Work
    .
  3. On the
    BlackBerry Dynamics
     tab, in the
    App configuration
     table, click the app configuration that you want to edit.
  4. On the
    Interoperability
     tab, complete one of the following tasks:
    Task
    Steps
    Send the SDTID file as an attachment (
    iOS
     and
    iPadOS
     only)
    1. In the
      File Handling
       section, select the
      Enable exporting to 3rd-party native apps
       check box.
    2. In the drop-down list, select
      Allow exporting only to these apps
      .
    3. In the
      Enter App ID
       field, enter the RSA SecurID Software Token app ID.
    4. Send the SDTID file to your users.
    5. Request users to open the email in the
      BlackBerry Work
       app, tap the RSA token attachment, and follow the on-screen prompts to complete the authentication process. 
    Send the seed record token data in a clickable link in the email body (
    iOS
    ,
    iPadOS
    , and
    Android
    )
    1. In the
      Launch 3rd party app
       section, select the
      Enable integration with 3rd party RSA SecurID app using CTF token seed
       check box.
    2. Send the seed record to your users. The seed record must be in a CTF URL format. See the
      Before you begin
       section above to verify that you are using the appropriate URL scheme for your users' devices.
    3. Request users to open the email in the
      BlackBerry Work
       app, tap the RSA token link, and follow the on-screen prompts to complete the authentication process.