Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 206 / 340

Related
Documentation
Configuring a Secure Access Certificate Server Instance (NSM Procedure) on page 184
•
•
Configuring a Secure Access SAML Server Instance (NSM Procedure) on page 188
Configuring a Secure Access SAML Server Instance (NSM Procedure)
The Secure Access device accepts authentication assertions generated by an SAML
authority using either an artifact profile or a POST profile. This feature allows a user to
sign in to a source site or portal without going through the Secure Access device first,
and then to access the Secure Access device with single sign-on (SSO) through the SAML
consumer service.
To configure a new SAML server instance:
1.
In the NSM navigation tree, select Device Manager > Devices .
2.
Click the Device Tree tab, and then double-click the Secure Access device for which
you want to configure an SAML server instance.
3.
Click the Configuration tab and select Authentication > Auth Servers . The
corresponding workspace appears.
NOTE: If you want to update an existing server instance, click the
appropriate link in the Auth Server Name box, and perform the Steps 5
through 8.
4.
Click the New button. The New dialog box appears.
5.
In the Auth Server Name list, specify a name to identify the server instance.
6.
Select SAML Server from the Auth Server Type list.
7.
Configure the server using the settings described in Table 48 on page 188.
8.
Click one:
• OK —Saves the changes.
• Cancel —Cancels the modifications.
Table 48: SAML Server Instance Configuration Details
Your Action Function Option
SAML Settings > Basic Settings tab
Enter the URL. Specifies the source site inter-site transfer
service URL. Source Site
Inter-Site Transfer
Service URL
Enter the URL or hostname
of the issuer of the
assertion. Specifies the issuer value for the source site. Issuer Value for
Source Site
Copyright © 2010, Juniper Networks, Inc. 188
Configuring Secure Access Devices Guide