Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 238 / 340

Table 59: Configuring Basic, NTLM, and Kerberos Resources (continued)
Your Action Options
General > NTLM
Select the Enable NTLM SSO check box to enable NTLM SSO. If you do not enter
any configuration information, the device attempts to figure out the domain from
the hostname and performs SSO using the system credentials.
Enable NTLM SSO
Select the Fallback to NTLM V2 check box to fall back to NTLMv1 if Kerberos fails.
If you do not select this option and Kerberos SSO fails, an intermediation page
appears.
Fallback to NTLM V1
General > NTLM > NTLM Intermediation > New NTLM Intermediation
Enter a name to uniquely identify the NTLM intermediation. No external mapping is
made to the label value. Label
Enter the Active Directory domain name. domain
Select one of the following options from the drop-down list:
• System —Specifies the set of user credentials, such as primary and secondary
authorization credentials, stored in the device. If you select this option, you do not
need to enter the username and password.
• Variable —Allows tokens such as username and password to be used in the
Username and Password boxes.
• Static —Specifies the username and password exactly as they are entered in the
Username and Password boxes.
Credential Type
Enter the account username. If you select Variable as the credential type, you can
enter the username token.
Username
Enter an account password. Password
Enter the password token if you select Variable as the credential type. Variable Password
General > Basic Authentication
Select the Enable Basic Authentication SSO check box to enable basic
authentication SSO.
Enable Basic Authentication SSO
General > Basic Authentication > Basic Auth Intermediation > New Basic Auth Intermediation
Enter a name to uniquely identify the basic authentication intermediation. No external
mapping is made to the label value. Label
Select one of the following options from the drop-down list:
•
System —Specifies the set of user credentials, such as primary and secondary
authorization credentials, stored in the device. If you select this option, you do not
need to enter the username and password.
• Variable —Allows tokens such as username and password to be used in the
Username and Password boxes.
•
Static —Specifies the username and password exactly as they are entered in the
Username and Password boxes.
Credential Type
Copyright © 2010, Juniper Networks, Inc. 220
Configuring Secure Access Devices Guide