The server/backup can be a little problematic (for 4.X) under Solaris 8. Be sure to get an account on the SecurCare online asap, since all the needed patches and documentation can be found there. (Anybody know what the phobia is with the letter 'e'?!?).

In addition to that site, it is mandatory to figure out a group design that fits in with the design of your security plan. In our case we used the Ace servers as the ultimate authority for user security role definitions, allowing for highly granular control of user privleges.

A (cleaned up) example of group design can be seen here.

Notes for adding unix, web and cisco clients can be found here.

Sample configurations for Cisco routers and switches.

The API for SecurId is well defined and easy to use. It has been published in two forms - the regular API and one for remote authentication. There are a number of sample programs ( example1.c and example2.c) which come with the software which show how this is done.

There are a number of clients for web servers (I have tried Netscape - it works good). There is an Apache module which does the same thing. I love open source!