Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 305 / 340

Table 84: IF–MAP Session-Export Policy Configuration Details (continued)
Your Action Function Option
Select this action and the identity options appear.
• Identity —Enter the identity name. Identity is
normally specified as <Name>, which assigns
the user’s login name. Any combination of
literal text and context variables may be
specified.
• Identity Type —Select the identity type. If you
choose Other for Identity Type, enter a unique
identity type in the text box.
Specifies the applicable
identity. Set IF-MAP
Identity
Roles tab
Select this action and the following role options
appear.
• Copy matching roles —Select this option to
copy all of the user roles that match the roles
specified in the Roles section of this policy into
the IF-MAP roles data.
• Copy ALL roles —Select this option to copy all
of the roles from the user session to the IF-MAP
capabilities data.
• Set roles specified below —Select this option
to set the specified roles. The Roles option
appears. From Roles, click
New and enter a
specified role.
Specifies the applicable
roles. Set IF-MAP
Roles
Capabilities tab
Select this action and the following role options
appear:
• Copy matching roles —Select this option to
copy all of the user roles that match the roles
specified in the Roles section of this policy into
the IF-MAP capabilities data.
• Copy ALL roles —Select this option to copy all
of the roles from the user session to the IF-MAP
roles data.
• Set capabilities specified below —Select this
option to set the specified capabilities. The
Capabilities option appears. From Capabilities,
click
New and enter a specified capability.
Specifies the applicable
roles. Set IF-MAP
Capabilities
Device Attributes tab
287 Copyright © 2010, Juniper Networks, Inc.
Chapter 20: Configuring IF-MAP Federation Settings