Juniper Networks Secure Access Administration Guide

Table of Contents
Chapter 6 Resource policies 81
Licensing: Resource policies availability .........................................................82
Resource policy components .........................................................................82
Specifying resources for a resource policy ...............................................83
Resource policy evaluation.............................................................................86
Creating detailed rules for resource policies ...................................................87
Writing a detailed rule .............................................................................88
Customizing resource policy UI views ............................................................89
Chapter 7 Authentication and directory servers 91
Licensing: Authentication server availability...................................................92
Task summary: Configuring authentication servers........................................92
Defining an authentication server instance ....................................................93
Defining an authentication server instance..............................................94
Modifying an existing authentication server instance ..............................94
Configuring an anonymous server instance ...................................................94
Anonymous server restrictions ................................................................95
Defining an anonymous server instance..................................................95
Configuring an ACE/Server instance...............................................................96
Defining an ACE/Server instance .............................................................97
Generating an ACE/Agent configuration file .............................................98
Configuring an Active Directory or NT Domain instance ................................99
Defining an Active Directory or Windows NT domain server instance...100
Multi-domain user authentication ..........................................................102
Active Directory and NT group lookup support......................................104
Configuring a certificate server instance........................................................... 105
Configuring an LDAP server instance ...........................................................106
Defining an LDAP server instance .........................................................107
Configuring LDAP search attributes for meeting creators ......................110
Monitoring and deleting active user sessions.........................................110
Enabling LDAP password management .................................................111
Configuring a local authentication server instance .......................................115
Defining a local authentication server instance......................................115
Creating user accounts on a local authentication server.........................117
Managing user accounts ........................................................................118
Delegating user administration rights to end-users ................................119
Configuring an NIS server instance ..............................................................120
Configuring a RADIUS server instance .........................................................120
User experience for RADIUS users.........................................................121
Configuring the IVE to work with a RADIUS server................................122
Enabling RADIUS accounting.................................................................125
Configuring an eTrust SiteMinder server instance ........................................133
eTrust SiteMinder overview ...................................................................134
Configuring SiteMinder to work with the IVE.........................................138
Configuring the IVE to work with SiteMinder.........................................144
Debugging SiteMinder and IVE issues....................................................156
Configuring a SAML Server instance.............................................................156
Using the artifact profile and the POST profile.......................................157
Creating a new SAML Server instance....................................................161
Chapter 8 Authentication realms 165
Licensing: Authentication realms availability................................................166
Creating an authentication realm .................................................................166
Table of Contents � ix