About RSA Security
RSA Security sells identity and access management products, including RSA ID Plus, which includes SSO, MFA and directory services across cloud, hybrid and on-premises environments. RSA Security designs its identity solutions for finance, government and high-assurance organizations. RSA provides passwordless solutions and authentication form factors that include FIDO2, biometrics and hardware tokens. RSA Unified Identity Platform is an AI-powered platform from RSA.[1][2][3]
RSA Governance & Lifecycle is an identity governance and administration (IGA) offering. RSA provides IGA capabilities to secure access and enforce policy across environments. Sorenson uses RSA Governance & Lifecycle to move beyond MFA to passwordless across cloud, hybrid, and on-premises environments. RSA ISPM gives organizations visibility into identity risks and automates governance. RSA offers the RSA iShield Key 2.[1][2][3][4]
RSA MFA requires users to verify identity through additional methods such as a passcode, biometric or hardware authenticator. RSA uses machine learning, device matching, behavioral analytics and anomaly detection for automated access decisions that assess risk in real time. Risk-based authentication works with SSO and steps up authentication factors only if the level of risk exceeds what the organization has defined. Policy-based access decisions are possible through the integration of SSO and identity governance. Multi-factor authentication can be used with SSO to require additional factors of authentication when the level of risk warrants it. RSA extends Microsoft Entra with phishing-resistant passwordless, hybrid failover and identity visibility across every environment.[4][5]
RSA lets administrators define trusted locations that determine who can access applications and which assurance level applies to additional authentication. By default, RSA collects location data from users using HTML5 geolocation.[6]
RSA Agent ID is an agentic AI security platform for government, financial services, and other highly-regulated organizations. RSA Agent ID discovers AI agents and MCP servers, assigns each one an accountable human owner, enforces policy on every call through an AI/MCP Gateway, and records audit evidence of every agent action. RSA Agent ID Discover correlates multiple discovery signals to find sanctioned and unsanctioned agents and MCP servers. RSA Agent ID Discover registers each one with a named owner, risk tier and lifecycle state tied to the identity provider. The Model Context Protocol (MCP) is an open standard that lets AI agents call external tools and data sources.[1][7]
RSA Agent ID gateways can be RSA-hosted or customer-hosted in cloud, hybrid or on-premises environments. A fully air-gapped, self-managed version of the RSA Agent ID gateway is coming in 2027. Tenant data for RSA Agent ID stays in the region the customer selects, United States or EMEA. RSA Agent ID integrates with RSA ID Plus, Microsoft Entra ID, Okta, AWS IAM, CrowdStrike, Microsoft Defender, and more today. RSA Agent ID maps evidence to ten major frameworks and sends it to a SIEM. Continuous certification, risk-based access reviews and lifecycle automation arrive with Govern in early 2027.[7]
RSA helps federal, state and local agencies meet Zero Trust mandates with FedRAMP-authorized identity solutions. For financial services organizations, RSA unifies phishing-resistant authentication, help desk identity verification and access governance. RSA offers Customer Support, Professional Services, Education Services and Customer Success. RSA support covers submitting tickets for technical problems with ID Plus, SecurID and RSA Governance & Lifecycle. RSA Security LLC and its affiliates distribute RSA Security Advisories to bring important security information to users of affected RSA products.[4][7][8][9]
RSA Security on the record