Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 242

Configuring Secure Access Devices Guide
224
Table 61: Configuring SAML Access Control Resource Policy
Details (continued)
Role Specifies the roles to which this
application policy applies.
Action Allows or denies the Secure Access
device to perform an access control
check.
SAML Web Specifies the URL of the access
Service URL management system's SAML server.
SAML Web Specifies the hostname of the issuer,
Service Issuer which in most cases is the hostname
of the access management system.
Authentication Specifies the authentication method
Type that the SAML Web service should
use to authenticate the Secure
Access device.
Select one of the following options from
the drop-down list:
Policy applies to ALL roles—Applies
this policy to all users.
Policy applies to SELECTED
roles—Applies this policy only to
users who are mapped to roles in the
selected roles list.
Policy applies to all roles OTHER
THAN those selected
below—Applies this policy to all
users except for those who map to
the roles in the selected roles list.
Select one of the following options from
the drop-down list:
Use SAML—Secure Access device
performs an access control check to
the specified URL.
Do not use SAML—Secure Access
device does not perform an access
control check.
Use Detailed Rules—Specifies one
or more detailed rules for this policy.
Enter the URL, using the
format:https://hostname/ws.
Enter a unique string.
Select one of the following options from
the drop-down list:
None—Does not authenticate the
Secure Access device.
Username/Password—Authenticates
the Secure Access device using a
username and password.
Certificate—Authenticates the
Secure Access device using a
certificate signed by a trusted
certificate authority.
Copyright © 2010, Juniper Networks, Inc.