RSA Authenticator (SecurID)

RSA Authenticator (SecurID) supports authentication for cloud and on-premises applications and is designed for organizations securing on-premises environments. It combines software and hardware authenticators with OTP, multifactor, and passwordless options. The mobile app supports push notifications, biometrics, FIDO, and OTP for access to services including VPNs and Microsoft 365. RSA Authentication Manager provides authentication, access, and management capabilities and can run on a hardened rack-mountable appliance. RSA describes its hybrid approach as designed to preserve access during network disruptions or cloud outages. Integration options include SAML, RADIUS, and authentication APIs, with named integrations such as Okta and SailPoint. The mobile app supports up to 30 credentials, but they cannot be backed up or restored; device-bound passkeys also cannot be exported or restored. Version 4.7 requires Android 10 or later or iOS 16 or later. Pricing is on request, and there is no free plan.

RSA SecurID combines mobile authentication with management options for cloud and on-premises access. Buyers should account for the credential limit and lack of backup or restore on mobile.

It suits financial services, government agencies, and other organizations with high-assurance authentication needs. It is available across Android, iOS, Windows, macOS, and self-hosted environments.

RSA Authenticator (SecurID) is the mobile authenticator for RSA’s broader access and authentication platform, supporting cloud and on-premises applications. It is best suited to organizations that need high-assurance access across hybrid environments and can manage credentials centrally. Its push, OTP, biometric, and passwordless options are balanced by a 30-credential mobile limit and no credential backup or restore.

Overview

SecurID brings software and hardware authenticators together with RSA Authentication Manager, which provides authentication, access, and management capabilities and can run on a hardened rack-mountable appliance. The approach suits organizations that need to support both cloud services and on-premises applications, including access during network disruptions or cloud outages.

RSA supports OTP, multifactor authentication, and passwordless authentication. The mobile app can approve push requests, use device biometrics, and provide FIDO and OTP access to services such as VPNs and Microsoft 365. For organizations already using identity infrastructure, documented integration paths include SAML, RADIUS, and an authentication API, with integrations such as Okta and SailPoint.

Key features

Mobile authentication and passkeys

The app supports push approvals, biometrics, FIDO, and OTP, giving organizations several ways to authenticate mobile users. Since version 4.5, it can also manage FIDO2-certified, device-bound passkeys. Those passkeys cannot be exported or restored, so the feature favors device-bound credentials over portability when a user changes or loses a phone.

The mobile app can manage up to 30 credentials. That cap may be enough for a focused set of work accounts, but users who need a larger personal or work credential collection should consider another authenticator. Credentials cannot be backed up or restored, which makes device replacement a more consequential part of account recovery.

Hybrid administration and security

Authentication Manager adds administration and access management to the mobile app, while the hybrid design is intended to keep authentication available during network interruptions or cloud outages. RSA states that it uses FIPS 140-2 or FIPS 140-3 validated cryptographic modules to protect data at rest and in motion across mobile, cloud, and on-premises environments. Organizations that need implementation help can use RSA professional services or find trained, accredited partners through its partner locator.

Pricing

RSA SecurID is paid, with custom pricing. There is no free plan. That model is aimed at organizations evaluating an authentication deployment rather than individuals seeking a no-cost authenticator, and buyers will need to contact RSA for a quote before they can assess cost.

The product plan includes built-in MFA, lifecycle provisioning, SAML 2.0 single sign-on, and directory integrations for ID Plus Cloud Directory and Azure AD (Entra ID). It supports 2,000 prebuilt apps. Adaptive access policies and adaptive access are not included, so organizations that require policy decisions based on changing access context should compare options carefully.

Platforms

RSA lists Android, iOS, Windows, macOS, and self-hosted support. RSA Authenticator 4.7 requires Android 10.0 or later or iOS 16.0 or later. The mobile app’s 30-credential limit and lack of backup or restore apply to iOS and Android.

Who it's for

SecurID is aimed at financial services, government agencies, and other organizations with high-assurance access needs. It is a strong fit where teams need mobile authentication connected to cloud and on-premises applications, established integration paths, and a hybrid deployment option. Its paid, custom-priced model and management capabilities are likely excessive for someone who only needs a personal OTP app.

Pros and cons

• Pros: Push, OTP, biometrics, FIDO, and passwordless options let organizations support different authentication needs from one platform.
• Pros: Hybrid deployment and a hardened appliance option serve organizations that need on-premises control and access designed to withstand cloud or network outages.
• Pros: SAML, RADIUS, API paths, and integrations such as Okta and SailPoint give teams documented ways to connect SecurID with broader identity environments.
• Cons: The mobile app caps credentials at 30, which can constrain users managing many accounts.
• Cons: Credentials and device-bound passkeys cannot be backed up or restored, complicating recovery when a device is replaced or lost.
• Cons: Custom pricing and no free plan make SecurID harder to evaluate for smaller teams or individual users.
• Cons: Adaptive access policies are absent, limiting its fit for organizations that require that control.

Alternatives

For governance-focused comparisons, browse Identity Governance Software. For a narrower focus on SSO or access management, see Single Sign-On Software and Identity and Access Management Software. Teams comparing MFA tools can also review Multi-Factor Authentication Software or Authenticator apps.

SailPoint IdentityIQ is another paid, cross-platform identity option, with pricing dependent on factors including the number of digital identities and typically structured as a three-year contract with annual billing upfront. Avatier Identity Anywhere offers paid password management and single sign-on plans, priced at $1.50 a month and $2 a month respectively, each with a minimum one-year commitment. Soffid Identity Governance Administration offers free open-source binary downloads with registration, as well as a free trial.

Corma has a free tier that connects an identity provider, browser extension, and SSO connection for 10 apps. Evolveum midPoint is open source with no license fee; clustering and selected features require an active support subscription. Oracle Cloud Infrastructure Secret Management is a free alternative in the secret-management category. Stitchflow offers a free first workflow built and tested in the customer’s environment, with ongoing service priced at $1,000 a month. Beta Systems Garancy Suite offers one-time purchase and subscription options with custom pricing.

Verdict

Choose RSA SecurID if your organization needs mobile authentication as part of a high-assurance system spanning cloud and on-premises applications, especially when hybrid access and multiple authentication methods matter. Its breadth and management options are the main reasons to choose it. Look elsewhere if you need mobile credential backup, more than 30 credentials, adaptive access policies, or a free plan.