Configuring A Secure Access Saml Server Instance (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual

Configuring Secure Access Devices Guide
Related
Documentation

Configuring a Secure Access SAML Server Instance (NSM Procedure)

188
Configuring a Secure Access Certificate Server Instance (NSM Procedure) on page 184
Configuring a Secure Access SAML Server Instance (NSM Procedure) on page 188
The Secure Access device accepts authentication assertions generated by an SAML
authority using either an artifact profile or a POST profile. This feature allows a user to
sign in to a source site or portal without going through the Secure Access device first,
and then to access the Secure Access device with single sign-on (SSO) through the SAML
consumer service.
To configure a new SAML server instance:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Secure Access device for which
2.
you want to configure an SAML server instance.
Click the Configuration tab and select Authentication > Auth Servers. The
3.
corresponding workspace appears.
NOTE: If you want to update an existing server instance, click the
appropriate link in the Auth Server Name box, and perform the Steps 5
through 8.
Click the New button. The New dialog box appears.
4.
In the Auth Server Name list, specify a name to identify the server instance.
5.
Select SAML Server from the Auth Server Type list.
6.
Configure the server using the settings described in Table 48 on page 188.
7.
Click one:
8.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 48: SAML Server Instance Configuration Details
Option Function
SAML Settings > Basic Settings tab
Source Site Specifies the source site inter-site transfer
Inter-Site Transfer service URL.
Service URL
Issuer Value for Specifies the issuer value for the source site.
Source Site
Your Action
Enter the URL.
Enter the URL or hostname
of the issuer of the
assertion.
Copyright © 2010, Juniper Networks, Inc.