RSA ID Plus is RSA’s subscription authentication service. RSA describes it as “five levels of multi-tenant, cloud and hybrid solutions” that can be deployed in the cloud, on premises or in a hybrid model.[1] Its components are the Cloud Authentication Service (CAS), the Identity Router (IDR) and, in most plans, an on-premises RSA Authentication Manager.[1] ID Plus is a Service Offering under the Terms of Service for RSA Cloud Offerings, with the ID Plus Service Description setting the product-specific terms.[4]
During the subscription term set in the ordering document, RSA provides ID Plus “in accordance with the subscription level selected in the Order”.[1] Supplemental Software that comes with the service, such as authentication agents and Mobile Lock, is governed by the RSA End User License Agreement. Supplemental Hardware, such as DS100 authenticators, is governed by the Service Description and the Product Warranty and Maintenance Table.[1] Catalog proof: ID Plus subscription plans.
Editions
The Service Description defines five plans. The accepted Order “will state which package has been selected by Customer”.[1]
| Plan | Deployment models | Multi-factor authentication | Single sign-on | Contextual access | Catalog row |
|---|---|---|---|---|---|
| ID Plus C1 | Cloud only | Cloud-only MFA | Basic | Static | RSA ID Plus C1 |
| ID Plus E1 | Cloud, hybrid, on premises | Hybrid MFA | Not included | Static | RSA ID Plus E1 |
| ID Plus M1 | Cloud, hybrid, on premises | Hybrid MFA | Not included | Static | RSA ID Plus M1 |
| ID Plus E2 | Cloud, hybrid, on premises | Hybrid MFA with SDK | Enhanced | Adaptive | RSA ID Plus E2 |
| ID Plus E3 | Cloud, hybrid, on premises | Hybrid MFA with SDK | Enhanced | Risk-based | RSA ID Plus E3 |
Source for the table: the ID Plus subscription plan grid.[1] The grid also lists the Authentication Manager components that come with the hybrid plans: a “Server license (Enterprise Edition)”, software tokens, on-demand authentication, “Up to 15 replica servers”, and virtual and hardware appliances. Footnotes add that RSA ID Plus Identity Governance became available as an add-on to E2 and E3 contracts effective 2026-03-16, and that Mobile Lock and Premium Support are included in E3 for new contracts executed after 2023-10-16.[1]
Metrics
User. ID Plus is sold per user; support fees “will be directly related to the per user license volume”.[1] Under the Terms of Service, a User is “any person who is authorized to access or use the Service Offering or Customer’s Content directly under Customer’s Login Credentials”. Users may include employees and contractors working for the customer’s internal business purposes, but not other third parties, partners or customers unless the Service Description allows them.[2] RSA’s general User unit counts everyone who may be managed by or authorized to use the software, “regardless of whether such Users are actively using” it.[4] Catalog proof: Cloud Users exclude partners and customers unless the Service Description allows them; ID Plus support fees follow per-user licence volume.
MFA licence. The Cloud Administration Console reports a separate measure. “The MFA license measures the number of users who have registered a device with the RSA Authenticator app installed.”[3] The License Usage API returns, for the current month and the previous 12 months, the MFA licences used, users with third-party FIDO authenticators, SMS and voice tokencodes sent, and active users. An active user “either has a registered authenticator or who authenticated successfully”.[3] RSA’s stated purpose is to “monitor for license compliance” and order more licences if needed. Catalog proof: ID Plus MFA license; ID Plus MFA licences count users who registered an authenticator device.
Counting / floors
Committed quantity and overages. Cloud charges “may consist of both a committed amount as well as additional amounts”. These include add-on features the customer orders or enables, and “charges Customer incurs based on actual usage of the Service Offering (metered charges, or “overages”)”. RSA may bill additional charges directly to the customer even when the subscription was bought through an RSA-authorized reseller.[2] Catalog proof: Cloud charges include metered overages that RSA may bill directly.
Monitoring. RSA “monitors and collects configuration, performance, and usage data”. Among the purposes listed is “tracking entitlements”, and the customer “must not interfere with that monitoring”.[2] For ID Plus, compliance is therefore visible to RSA continuously rather than only through an audit. Catalog proof: RSA monitors cloud usage, including to track entitlements.
Accounts. RSA delivers administrator credentials. The customer then “will create and manage Account Access Information for each authorized user of the Service Offering” and is responsible for all activity under it.[1] Removing leavers’ accounts and devices is the main lever on both the user count and the MFA licence count.
On-premises components. In hybrid plans the Authentication Manager component follows the on-premises rules. Users with assigned authenticators count against its licence limit, and an Enterprise licence allows up to fifteen replicas. See SecurID and Authentication Manager licensing.
Virtualization & partitioning
ID Plus has no processor, host or partitioning metric. The hybrid plans include Authentication Manager as a virtual or hardware appliance, with “Up to 15 replica servers”.[1] Authentication agents may be installed as needed, provided they are used only with RSA Software the customer has licensed.[4] Catalog proof: Authentication agents may be installed as needed for licensed software.
Cloud / BYOL
The cloud components are kept current by RSA. “Cloud Authentication Service (CAS) tenants are automatically updated to the latest monthly release”, and Identity Router servers are updated within 30 days of each release. End of primary support therefore matters only for on-premises components such as Authentication Manager, agents and authenticator apps.[5] The production instance of the cloud authentication components carries a 99.99% monthly availability standard.[1] Cloud software warranty “runs for the duration of the subscription”.[6] Catalog proof: Cloud Authentication Service tenants always run the latest release.
Programs
Subscription term and renewal
The ID Plus term is set in the accepted Order, subject to the Terms of Service.[1] “The initial Subscription Term shall automatically renew for additional Subscription Terms and at the same license quantity as stated in the Order” unless either party gives notice of non-renewal or licence count reduction at least 90 days before the term ends. Renewal is priced at the same discount off the then-current price list with annual price adjustments, excluding one-time discounts.[2] Late renewal payments carry interest of 1.5% per month.[2] On term purchases “no perpetual licenses are granted”, and there is no termination for convenience.[4] Catalog proof: Cloud Subscription Terms renew at the same quantity unless reduced 90 days ahead; Subscription term and renewal.
Price adjustments
Upon notice and consent, and not more than once a year, fees may be adjusted for increases in the US Consumer Price Index. A customer’s failure to consent “may result in a termination by RSA”.[2] Where pricing is fixed in an Order, an annual cost review changes prices once cumulative cost changes reach 5%.[2] Catalog proof: Cloud fees may rise with CPI once a year.
DS100 Subscription
The DS100 is “a cloud-managed, multi-functional hardware authenticator” supporting one-time passwords and FIDO2. It is licensed under a term licence for the Subscription Term.[1] The initial DS100 quantity may not exceed the ID Plus User quantity. DS100 Users can be increased at any time, but “Customers may decrease their DS100 Users only at the end of the current Subscription Term”. After full payment for a subscription year, the customer may draw a 25% annual allocation of replacement devices. The allocation is first available 90 days after the initial Order and does not carry over.[1] DS100 devices carry a five-year replacement warranty for hardware failure.[6] Catalog proof: RSA DS100 Subscription; DS100 quantity may not exceed ID Plus Users and can only be reduced at term end; DS100 annual allocation.
Support
Support is tiered, with availability ranging from 9x5 to 24x7 and a Designated Level 2 option in the highest tier. Fees follow the per-user licence volume.[1] Customer Success availability “is based on an annual spend matrix”.[1]
Audits and compliance
Beyond continuous monitoring, the EULA governs the on-premises Supplemental Software. It allows RSA to audit usage once a year and to monitor licence quantities remotely, and it accepts automatic billing for overutilization up to list price.[7] Catalog proof: RSA may audit once a year and monitor licence quantities remotely.
Out of scope
- RSA ID Plus Identity Governance add-on terms and the Help Desk Live Verify feature beyond the plan footnotes.
- FedRAMP-specific offerings. RSA notes that Mobile Lock is not FedRAMP authorized for any ID Plus package.[1]
- Prices, which RSA does not publish.