RSA SecurID provides one-time password and MFA authentication through RSA Authentication Manager on premises and a cloud service. Pages here cover replacing it with self-hosted privacyIDEA.
Comparing RSA SecurID and Authentication Manager with self-hosted privacyIDEA: token types from hardware OTP to FIDO2 and push, RADIUS and agent integrations, user stores, appliance versus Linux packages, licensing, and who supports each.
Moving from RSA Authentication Manager to privacyIDEA: issuing new tokens because SecurID seeds are not among privacyIDEA's import formats, repointing RADIUS clients, replacing agents for Windows and web servers, and running both systems during enrollment.
Cost of ownership by component, without RSA list prices, which RSA does not publish: SecurID licenses, hardware tokens and appliances, upgrade work, against privacyIDEA servers, optional NetKnights Enterprise Edition support, new authenticators, migration and operations.
Authentication Manager 8.7 SP2 leaves primary support in January 2027. This page sets the 8.8 upgrade, with its new operating system, deprecated agents and TLS changes, against replacing SecurID with privacyIDEA, and lists what to check before choosing.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.