Juniper NETWORK AND SECURITY MANAGER, Руководство пользователя

Страница: 243 / 340

Table 61: Configuring SAML Access Control Resource Policy
Details
(continued)
Enter the username. Specifies the username that the
Secure Access device must send the
Web service.
NOTE: The username and password
fields are displayed only when you
select the
Username/Password
option from the Authentication Type
drop-down list.
Username
Enter the password Specifies the password that the
Secure Access device must send the
Web service. Password
Select the certificate installed on the
Secure Access device from the
drop-down list. Specifies the certificate installed on
the Secure Access device to send to
the Web service.
NOTE: This box is displayed only
when you select
Certificate option
from the Authentication Type
drop-down list.
Certificate
Select one of the following options from
the drop-down list:
• Other —Sends the username in
another format agreed upon by the
Secure Access device and the SAML
Web service.
•
DN —Sends the username in the
format of a DN (distinguished name)
attribute.
• Email Address —Sends the username
in the format of an e-mail address.
•
Windows —Sends the username in
the format of a Windows domain
qualified username.
Specifies which method the Secure
Access device and SAML Web service
should use to identify the user. Subject Name
Type
Enter the username. Specifies the username that the
Secure Access device should pass to
the SAML Web service. Subject Name
Enter the hostname. Specifies the hostname of the issuer,
which in most cases is the hostname
of the access management system. Device Issuer
Enter the time. Specifies the amount of time the
Secure Access device should cache
the responses (in seconds). Maximum
Cache Time
(seconds)
225 Copyright © 2010, Juniper Networks, Inc.
Chapter 14: Configuring Single Sign-On