Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 195 / 340

Table 44: Secure Access eTrust SiteMinder Configuration
Details
(continued)
Your Action Function Option
Enter a URL. Specifies the internet
domain(s) to which the Secure
Access device sends the
SMSESSION cookie using the
same guidelines outlined for
the Cookie Domain field. IVE Cookie Domain
Select the protocol from the
drop-down list:
• HTTPS —Sends cookies
securely if other Web agents
are set up to accept secure
cookies.
•
HTTP —Sends cookies non
securely.
Sends cookies securely and
non securely. Protocol
Siteminder Settings > Authentication tab
Select the Automatic Sign-In
option to enable this feature.
Allows users with a valid
SMSESSION to automatically
sign in to the Secure Access
device.
Automatic Sign-In
Select an authentication realm
from the drop-down list. Specifies an authentication
realm for automatically
signed-in users. The Secure
Access device maps the user
to a role based on the role
mapping rules defined in the
selected realm. Automatic Sign In realm to use
Enter a URL. Specifies an alternate URL for
users who sign into the Secure
Access device through the
Automatic Sign-In mechanism.
The Secure Access device
redirects users to the specified
URL if the Secure Access
device fails to authenticate
and no redirect response is
received from the SiteMinder
policy server. If you leave this
field empty, users are
prompted to sign back in to the
Secure Access device.
NOTE: Users who sign in
through the sign-in page are
always redirected back to the
Secure Access device sign-in
page if authentication fails.
If Automatic Sign In fails,
redirect to
177 Copyright © 2010, Juniper Networks, Inc.
Chapter 11: Configuring Authentication and Directory Servers