Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 129

Copyright © 2010, Juniper Networks, Inc.
Table 34: IF–MAP Session-Export Policy Configuration Details (continued)
Option Function
Set IF-MAP Specifies the applicable
Identity identity.
Roles tab
Set IF-MAP Specifies the applicable
Roles roles.
Capabilities tab
Set IF-MAP Specifies the applicable
Capabilities roles.
Device Attributes tab
Chapter 12: Configuring IF-MAP Federation Settings
Your Action
Select this action and the identity options appear.
Identity—Enter the identity name. Identity is
normally specified as <Name>, which assigns
the user's login name. Any combination of
literal text and context variables may be
specified.
Identity Type—Select the identity type. If you
choose Other for Identity Type, enter a unique
identity type in the text box.
Select this action and the following role options
appear.
Copy matching roles—Select this option to
copy all of the user roles that match the roles
specified in the Roles section of this policy into
the IF-MAP roles data.
Copy ALL roles—Select this option to copy all
of the roles from the user session to the IF-MAP
capabilities data.
Set roles specified below—Select this option
to set the specified roles. The Roles option
appears. From Roles, click New and enter a
specified role.
Select this action. When you select this action
and the following role options appear.
Copy matching roles—Select this option to
copy all of the user roles that match the roles
specified in the Roles section of this policy into
the IF-MAP capabilities data.
Copy ALL roles—Select this option to copy all
of the roles from the user session to the IF-MAP
roles data.
Set capabilities specified below—Select this
option to set the specified capabilities. The
Capabilities option appears. From Capabilities,
click New and enter a specified capability.
111