Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 214 / 340

Table 51: Secure Access Authentication Realms Configuration
Details
(continued)
Your Action Function Option
Select an authentication server from
the drop-down list. Specifies an authentication server
to use for authenticating users who
sign in to this realm. Authentication
Select a directory/attribute server
from the drop-down list (optional). Specifies a directory/attribute
server to use for retrieving user
attribute and group information for
role mapping rules and resource
policies. Directory/Attribute
Select a RADIUS accounting server
from the drop-down list (optional). Specifies a RADIUS accounting
server to use to track when a user
signs in and out of the Secure
Access device. Accounting
Select a secondary authentication
server from the drop-down list. Specifies the name of the
secondary authentication server to
submit secondary user credentials
to an SSO-enabled resource or
enable two-factor authentication
to access the Secure Access device.
NOTE: You cannot choose an
anonymous server, certificate
server, or eTrust SiteMinder server.
Additional
Authentication
Server
Select General > End session if
authentication against this server
fails
to enable this option.
Controls access to the Secure
Access device based on the
successful authentication of the
user’s secondary credentials. If
selected, authentication fails if the
user’s secondary credentials fail. End session if
authentication
against this server
fails
Select the mode of submission of
username to the secondary
authentication server from the
drop-down list:
• Username is specified by user on
sign-in page
—Prompts the user
to manually submit his username
to the secondary server during the
Secure Access device sign-in
process.
• Predefined user name
template
—Automatically submits
a username to the secondary
server during the Secure Access
device sign-in process.
Specifies the username of the
secondary authentication server. Username for
Secondary Auth
Enter static text or a valid variable. Specifies the predefined username. Predefined User
Name
Copyright © 2010, Juniper Networks, Inc. 196
Configuring Secure Access Devices Guide