Configuring Secure Access Role Mapping Rules (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual

Configuring Secure Access Role Mapping Rules (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
Configuring Secure Access Authentication Realms (NSM Procedure) on page 195
Role mapping rules are conditions a user must meet for the device to map the user to
one or more user roles. These conditions are based on either user information returned
by the realm's directory server or the user's username.
To configure role mapping rules for an administrator/user realm:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Secure Access device for which
2.
you want to configure role mapping rules for an administrator/user realm.
Click the Configuration tab and select either Administrators > Admin Realms or
3.
Users > User Realms. The corresponding workspace appears.
Click the New button. The New dialog box appears.
4.
Configure role mapping rules for an administrator/user realm using the settings
5.
described in Table 53 on page 203.
Click one:
6.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 53: Role Mapping Rules Configuration Details
Option Function
Role Mapping Rules tab
User must select Specifies if you want the
from among users to select from the
assigned roles assigned roles.
User must select Specifies if you want
the sets of merged users to select the sets of
roles assigned by merged roles that are
each rule assigned by each rule.
Role Mapping Rules > New > Settings tab
Name Specifies the name
entered on the sign-in
page.
Assign these roles Specifies the list of
if the rule matches non-members whose
>Non-members roles are not matched
with the rules.
Chapter 12: Configuring Authentication Realms
Your Action
Select Admin Realm > Role Mapping Rules >
User must select from among assigned roles
to enable this option.
Select Admin Realm > Role Mapping Rules >
User must select the sets of merged roles
assigned by each rule to enable this option.
Enter a name.
Select a non-member from the list to assign to
the authenticated user by adding/removing it
to/from the Members list.
203