Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 246 / 340

Table 62: Configuring SAML SSO Artifact Profile Resource Policy
Details
(continued)
Your Action Function Opton
Enter the URL. Specifies the URL that the
Secure Access device must
contact the assertion
consumer service during SSO
transactions. SAML Assertion Consumer
service URL
Select Artifact or POST from
the drop-down list.
Specifies the type of the
profile. Profile
Enter the source ID. If you enter
a:
• Plain text string—The Secure
Access device converts,
pads, or truncates it to a
20-byte string.
•
Base-64 encoded
string—The Secure Access
device decodes it and
ensures that it is 20 bytes.
Specifies the source ID for the
Secure Access device. Source ID
Enter the string. Specifies the string that the
Secure Access device can use
to identify itself when it
generates assertions. Issuer
Select one of the following
options from the drop-down
list:
•
Other —Sends the username
in another format
• DN —Sends the username in
the format of a DN
(distinguished name)
attribute.
•
Emal Address —Sends the
username in the format of
an e-mail address.
• Windows —Sends the
username in the format of a
Windows domain qualified
username.
Specifies which method the
Secure Access device and
assertion consumer service
should use to identify the user. Subject Name Type
Enter a variable. Or, enter static
text. Specifies the username that
the Secure Access device
should pass to the assertion
consumer service. Subject Name
Enter a comma-separated list
of domains. Specifies the list of domains
to which the SSO cookies are
associated. New Cookie Domain(s)
Copyright © 2010, Juniper Networks, Inc. 228
Configuring Secure Access Devices Guide