Cisco ASA Series Cli Configuration Manual page 1834

Using Single Sign-on with Clientless SSL VPN
Command
Step 6
hidden-parameter
Example:
SMENC=ISO-8859-1&SMLOCALE=US-EN&target=https%3A%2F%2
Fwww.example.com%2Femco%2Fappdir%2FAreaRoot.do%3FEMC
OPageCode%3DENG&smauthreason=0
To specify this hidden parameter, enter the
following commands:
hostname(config)# aaa-server testgrp1 host
example.com
hostname(config-aaa-server-host)# hidden-parameter
SMENC=ISO-8859-1&SMLOCALE=US-EN&targe
hostname(config-aaa-server-host)# hidden-parameter
t=https%3A%2F%2Fwww.example.com%2Femc
hostname(config-aaa-server-host)# hidden-parameter
o%2Fappdir%2FAreaRoot.do%3FEMCOPageCo
hostname(config-aaa-server-host)# hidden-parameter
de%3DENG&smauthreason=0
hostname(config-aaa-server-host)#
Step 7
(Optional)
auth-cookie-name
Example:
hostname(config-aaa-server-host)# auth-cookie-name
SsoAuthCookie
hostname(config-aaa-server-host)#
Step 8
tunnel-group general-attributes
Step 9
authentication-server-group
Example:
hostname(config)# tunnel-group testgroup
general-attributes
hostname(config-tunnel-general)#authentication-serve
r-group testgrp1
Step 10
aaa-server-host
Cisco ASA Series CLI Configuration Guide
1-26
Chapter 1 Configuring Clientless SSL VPN
Purpose
Specifies hidden parameters for exchange with the
authenticating web server.
Shows an example hidden parameter excerpted from
a POST request. This hidden parameter includes
four form entries and their values, separated by &.
The four entries and their values are:
•
SMENC with a value of ISO-8859-1.
•
SMLOCALE with a value of US-EN.
•
target with a value of
https%3A%2F%2Fwww.example.com%2Femc
o%2Fappdir%2FAreaRoot.do.
•
%3FEMCOPageCode%3DENG.
•
smauthreason with a value of 0.
Specifies the name for the authentication cookie.
Specifies the authentication cookie name of
SsoAuthCookie.
Switches to tunnel-group general-attributes
configuration mode.
Configures a tunnel-group to use the SSO server
configured in the previous steps.
Configures the tunnel-group named /testgroup/ to
use the SSO server(s) named /testgrp1/".
Switches to aaa-server-host configuration mode.