Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 214

Configuring Secure Access Devices Guide
196
Table 51: Secure Access Authentication Realms Configuration
Details (continued)
Option Function
Authentication Specifies an authentication server
to use for authenticating users who
sign in to this realm.
Directory/Attribute Specifies a directory/attribute
server to use for retrieving user
attribute and group information for
role mapping rules and resource
policies.
Accounting Specifies a RADIUS accounting
server to use to track when a user
signs in and out of the Secure
Access device.
Additional Specifies the name of the
Authentication secondary authentication server to
Server submit secondary user credentials
to an SSO-enabled resource or
enable two-factor authentication
to access the Secure Access device.
NOTE: You cannot choose an
anonymous server, certificate
server, or eTrust SiteMinder server.
End session if Controls access to the Secure
authentication Access device based on the
against this server successful authentication of the
fails user's secondary credentials. If
selected, authentication fails if the
user's secondary credentials fail.
Username for Specifies the username of the
Secondary Auth secondary authentication server.
Predefined User Specifies the predefined username.
Name
Your Action
Select an authentication server from
the drop-down list.
Select a directory/attribute server
from the drop-down list (optional).
Select a RADIUS accounting server
from the drop-down list (optional).
Select a secondary authentication
server from the drop-down list.
Select General > End session if
authentication against this server
fails to enable this option.
Select the mode of submission of
username to the secondary
authentication server from the
drop-down list:
Username is specified by user on
sign-in page—Prompts the user
to manually submit his username
to the secondary server during the
Secure Access device sign-in
process.
Predefined user name
template—Automatically submits
a username to the secondary
server during the Secure Access
device sign-in process.
Enter static text or a valid variable.
Copyright © 2010, Juniper Networks, Inc.