1. Adaptive Authentication

2. Business need for Adaptive Authentication?
Existing Single factor authentication has various risks associated-
Single and hence weak control
Key logger Trojans
Malware attacks
Brute force
Replay, Dictionary attacks
Shoulder surfing
Repeated use of same password
Usage of same password for multiple applications
Password can be shared with others
Easy guessing
Session hijacking
Liability issues due to password breaches

3. Features
2FA(factor) Authentication
i.e. PIN+PASSCODE (The passcode changes every 60 second)
Multi factor Authentication (Risk Based Authentication) in form of Security question which is an additional layer of security
Transparent real-time fraud detection and authentication
Monitoring and authenticate both login and post login activities
Risk based self-learning engine which rapidly adjusts policies and controls to predict and protect against future attacks
Identifying fraud intelligence

4. Process Workflow Token Import Fail Token Import successful
NEW Token creation request
Token Import Fail
Token received via Mail
Login to Self service console
Set up 6 digit PIN and security questions
RSA setup installed on machine
Token Import successful

5. Step 1- Token Provisioning
A mail will be received by the user from which would include below information:
Activation Code
URL for importing token
Activation code expiry date
Serial Number
Subject of the mail is “Your CTKIP Credentials are available”
Mail would be received either in Inbox or Junk as well .So kindly check both the inbox.

6. Step 2-Setting the Security Questions
Access URL - on your browser
Provide your user ID without any alias HCLTECH or HCLISD and click on GO
Login with your password which will be same used for MyHCL and click on LOG ON.
User must set up 5 security questions and click on “SUBMIT YOUR REQUEST”
Note- Please remember answers to your set security questions.

7. Step 3 - Setting the 6 digit PIN
Click on create PIN(as showed in above screenshot)
Set your 6 numeric digit PIN and confirm
No special character and alphabets to be used.
Note-Remember the PIN as this would be required every time you access the application

8. Step 4- RSA Setup
User to check if RSA setup is available on his/her laptop. Below are the steps to be followed:
Click on START(Bottom most left icon on your desktop)
Search RSA SecurID Token
Red icon would be available (as shown in screenshot)
If setup is
Available on your system - Please skip next slide and proceed
Not available on your system - Kindly perform steps provided in next slide “Installation of RSA securID 4.1.1”

9. Installation of RSA SecurID 4.1.1
Once your “New token request” is approved an with Token No., Activation Code and Activation URL is shared. These details are now to be used to install the RSA MSI Package to use a soft token.
Login to with your AD credentials (ID, Password and domain)
In Security column, click on option VPN
Click on RSA SecurID Save and run the setup, in case it is asking for administrator password to run the setup please raise the remedy using URL under software installation category

10. Importing a Software Token
Open the RSA package installed on the system, click Import from Web & the screen is displayed
In the Enter URL field, please copy the URL received in mail from
In the Enter Activation Code enter the activation code provided by administrator.
Note- Do not click the URL received in mail .Kindly copy and paste in the RSA setup as showed in above screenshot.

11. Authenticate with a Passcode
In the SecurID desktop application, provide the 6 digit PIN set while requesting new token.
Click on the ARROW button and PASSCODE will be displayed
Access the application on MYHCL page
Copy the token code by clicking on COPY button and paste it on the authentication page.
Always Remember the PIN entered as this PIN would be used for your authentication while logging to the application.

12. Queries/Concerns-
In case of token not received from installation and configuration issue , kindly raise a remedy via BMC Remedy
Below is the path for raising the request-
Remedy ->Requestor console->New incident ->IT Services(HCLTech\HCLISD) ->Security->RSA Adaptive Authentication Related issues

13. Thanks!