Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 247 / 340

Table 62: Configuring SAML SSO Artifact Profile Resource Policy
Details
(continued)
Your Action Function Opton
Select one of the following
options from the drop-down
list:
• None —Does not
authenticate the assertion
consumer service.
• Username/Password —
Authenticates the assertion
consumer service using a
username and password.
• Certificate —Authenticates
the assertion consumer
service using certificate
attributes.
Specifies the authentication
method that the Secure
Access device should use to
authenticate the assertion
consumer service. Authentication Type
Enter the username. Specifies the username that
the assertion consumer
service must send the Secure
Access device.
NOTE: The username and
password boxes are displayed
only when you select the
Username/Password option
from the Authentication Type
drop-down list.
Username
Enter the password. Specifies the password that
the Secure Access device
must send the Secure Access
device. Password
Certificate
Enter the attribute name. For
example, enter cn=sales. Specifies the attributes that
the assertion consumer
service must send the Secure
Access device. (one attribute
per line).
NOTE: The
certificates-attributes box is
displayed only when you
select
Certificate option from
the Authentication Type
drop-down list.
Attribute Name
Enter the attribute value. Specifies the attribute values
that match the values
contained in the assertion
consumer service’s certificate. Attribute Value
SAML SSO > Role
229 Copyright © 2010, Juniper Networks, Inc.
Chapter 14: Configuring Single Sign-On