Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 221 / 340

•
Configuring Secure Access Authentication Realms (NSM Procedure) on page 195
Configuring Secure Access Role Mapping Rules (NSM Procedure)
Role mapping rules are conditions a user must meet for the device to map the user to
one or more user roles. These conditions are based on either user information returned
by the realm's directory server or the user's username.
To configure role mapping rules for an administrator/user realm:
1.
In the NSM navigation tree, select Device Manager > Devices .
2.
Click the Device Tree tab, and then double-click the Secure Access device for which
you want to configure role mapping rules for an administrator/user realm.
3.
Click the Configuration tab and select either Administrators > Admin Realms or
Users > User Realms . The corresponding workspace appears.
4.
Click the New button. The New dialog box appears.
5.
Configure role mapping rules for an administrator/user realm using the settings
described in Table 53 on page 203.
6.
Click one:
• OK —Saves the changes.
• Cancel —Cancels the modifications.
Table 53: Role Mapping Rules Configuration Details
Your Action Function Option
Role Mapping Rules tab
Select Admin Realm > Role Mapping Rules >
User must select from among assigned roles
to enable this option.
Specifies if you want the
users to select from the
assigned roles. User must select
from among
assigned roles
Select Admin Realm > Role Mapping Rules >
User must select the sets of merged roles
assigned by each rule
to enable this option.
Specifies if you want
users to select the sets of
merged roles that are
assigned by each rule. User must select
the sets of merged
roles assigned by
each rule
Role Mapping Rules > New > Settings tab
Enter a name. Specifies the name
entered on the sign-in
page. Name
Select a non-member from the list to assign to
the authenticated user by adding/removing it
to/from the Members list. Specifies the list of
non-members whose
roles are not matched
with the rules. Assign these roles
if the rule matches
>Non-members
203 Copyright © 2010, Juniper Networks, Inc.
Chapter 12: Configuring Authentication Realms