Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 246

Configuring Secure Access Devices Guide
228
Table 62: Configuring SAML SSO Artifact Profile Resource Policy
Details (continued)
Opton
SAML Assertion Consumer
service URL
Profile
Source ID
Issuer
Subject Name Type
Subject Name
New Cookie Domain(s)
Function
Specifies the URL that the
Secure Access device must
contact the assertion
consumer service during SSO
transactions.
Specifies the type of the
profile.
Specifies the source ID for the
Secure Access device.
Specifies the string that the
Secure Access device can use
to identify itself when it
generates assertions.
Specifies which method the
Secure Access device and
assertion consumer service
should use to identify the user.
Specifies the username that
the Secure Access device
should pass to the assertion
consumer service.
Specifies the list of domains
to which the SSO cookies are
associated.
Copyright © 2010, Juniper Networks, Inc.
Your Action
Enter the URL.
Select Artifact or POST from
the drop-down list.
Enter the source ID. If you enter
a:
Plain text string—The Secure
Access device converts,
pads, or truncates it to a
20-byte string.
Base-64 encoded
string—The Secure Access
device decodes it and
ensures that it is 20 bytes.
Enter the string.
Select one of the following
options from the drop-down
list:
Other—Sends the username
in another format
DN—Sends the username in
the format of a DN
(distinguished name)
attribute.
Emal Address—Sends the
username in the format of
an e-mail address.
Windows—Sends the
username in the format of a
Windows domain qualified
username.
Enter a variable. Or, enter static
text.
Enter a comma-separated list
of domains.