asp.net pdf reader : Adjusting page size in pdf SDK Library service wpf .net html dnn j-sa-sslvpn-7.1-adminguide28-part746

ThesecondpolicyusestheURL*/marketing/joeandmapstoacustomsign-inpage
designedexclusivelyforJoeintheMarketingDepartment.
IfyoulistthepoliciesinthisorderontheSign-inPoliciespage,SecureAccessdisplays
Joe’scustomsign-inpagetohimwhenheusestheyourcompany.com/marketing/joe
URLtoaccessSecureAccess.HedoesnotseetheMarketingsign-inpage,eventhough
itislistedandevaluatedfirst,becausethepathportionofhisURLdoesnotexactlymatch
theURLdefinedinthefirstpolicy.
Tochangetheorderinwhichadministratorsign-inpoliciesareevaluated:
1.
Intheadminconsole,chooseAuthentication>SigningIn>Sign-inPolicies.
2.
Selectasign-inpolicyintheAdministratorURLs,UserURLsorMeetingURLslist.
3.
Clicktheupanddownarrowstochangetheselectedpolicy’splacementinthelist.
4.
ClickSaveChanges.
Related
Documentation
AboutConfiguringSignInPoliciesonpage242
AboutSign-InNotifications
Withsign-innotifications,youcancreateandconfiguredetailednotificationmessages
thatappearforagentlessaccessendpointswhentheusersignsinusingabrowser.
Asanexample,youcouldconfigureanotificationmessagethatexplainstermsofuse,
company-specificpolicies,awelcomepage,anenduserlicenseagreement(EULA)or
amessageoftheday(MOTD).
Thismessagewillappearinaseparatepageeitherbefore(Pre-Auth)orafter(Post-Auth)
userauthenticationduringthesign-inprocess.Theuserisexpectedtoreadthecontent
ofthesign-innotificationpageandacknowledgebyclickingaProceedbutton.Theuser
mayindicatedisagreementbyclickingaDeclinebutton,inwhichcasetheuserwillsee
amessagethathe/shecannotsignin.
Youcanconfigureasign-inpolicytouseasign-innotificationeitheraspre-author
post-auth(orboth).Inthecaseofpost-authconfiguration,youcaneitheruseacommon
messageforallrolesoruseseparatemessagesforeachrole.
Youcanoptionallycreateamulti-languagesign-innotificationpackageifyouwantto
displaythecontentinthelanguagesetintheuser’sbrowser.Youcancustomizethe
sign-innotificationpageappearancebymodifyingtherelatedfieldsinasign-inpage
usingAdminUIoruseacustomsign-inpage.
Sign-innotifications(includinguploadedpackages)thatyoucreateareincludedinXML
exports.
245
Copyright©2012,JuniperNetworks,Inc.
Chapter10:Sign-InPolicies
Adjusting page size in pdf - Compress reduce PDF size in C#.net, ASP.NET, MVC, Ajax, WinForms, WPF
C# Code & .NET API to Compress & Decompress PDF Document
change font size pdf; best pdf compressor online
Adjusting page size in pdf - VB.NET PDF File Compress Library: Compress reduce PDF size in vb.net, ASP.NET, MVC, Ajax, WinForms, WPF
VB.NET PDF Document Compression and Decompression Control SDK
change font size in pdf; change file size of pdf document
NOTE: Sign-innotificationsmaynotworkwellwithallmobiledevicesdue
tothelimitationstheymayhave.
Asign-innotificationwillnotbedisplayedduringausersessionevenif
DynamicPolicyEvaluationcausestheassignedrolestochange.
ConfiguringandImplementingSign-inNotifications
Toconfigureandimplementsign-innotifications:
1.
Intheadminconsole,selectAuthentication>SigningIn>Sign-inNotifications.
2.
ClickNewNotification.
3.
SpecifyaNameforthenotification.Thisnameappearsinthesign-inpoliciespage,
andintheUsers>UserRoles>RoleName>General>UIOptionspageasaselection
option.
4.
SelectTextorPackageintheTypebox.
IfyouselectText,typethedesiredsign-innotificationmessage,orcopyandpaste
therelevanttextintotheTextfield.
IfyouselectPackage,clicktheBrowsebuttonandnavigatetoapreviouslyprepared
.zipfile.
Thezipfileshouldincludeadefault.txtandoneormore<language>.txtfiles
(Example:en.txt).
Language-abbreviationsshouldbestringsthatcanappearinAccept-Language
headerofanHTTPrequest.
ThecharacterencodingsupportedisUTF-8.
NOTE: Whenyoucreateazipfile,donotaddthefoldercontaining
thefiles,butaddthefilesdirectly.
5.
ClickSaveChanges.
6.
Intheadminconsole,selectAuthentication>SigningIn>Sign-inPolicies.
7.
Selectanexistingsign-inpolicy,orcreateanewsigninpolicy.
8.
UnderConfigureSign-inNotifications,selectthecheckboxforPre-AuthSign-in
Notification,Post-AuthSign-inNotification,orboth.
AfterPre-AuthSign-inNotification,selectapreviouslyconfiguredsign-innotification
fromthedrop-downmenu.
AfterPost-AuthSign-inNotification,selecttheoptionbuttonforUseacommon
Sign-inNotificationforallrolesorUsetheSign-inNotificationassociatedtothe
assignedrole.
Copyright©2012,JuniperNetworks,Inc.
246
JunosPulseSecureAccessServiceAdministrationGuide
C# PDF copy, paste image Library: copy, paste, cut PDF images in
one. Easy to zoom and crop image for adjusting image size. Besides C#.NET Project DLLs: Copy, Paste, Cut Image in PDF Page. In
change font size in pdf fillable form; pdf compressor
VB.NET Image: Generate GS1-128/EAN-128 Barcode on Image & Document
width & height and four margin size in a EAN-128 barcode on multi-page TIFF/PDF/Word documents such as removing the document noise, adjusting page color mode
pdf paper size; batch pdf compression
IfyouselectUseacommonSign-inNotificationforallroles,selectapreviously
configuredsign-innotificationfromthedrop-downmenu.
IfyouselectUsetheSign-inNotificationassociatedtotheassignedrole,the
sign-innotificationconfiguredfortheassignedrolewillbeused.
PreventthePost-Authsign-innotificationfrombeingdisplayedtouserswhohave
seenitbefore,byselectingtheSkipifalreadyshowncheckbox.(Thisisonlyahint
tothesystemandmaynotbehonoredalways)
9.
ClickSaveChanges.
10.
Customizethesign-innotificationappearancebyselectingAuthentication>Signing
In>Sign-inPagesandcreatingasign-inpageorusinganexistingpage.
11.
UnderSign-inNotificationappearance,customizeUIoptionsforPre-AuthNotifications
andPost-AuthNotificationsbychangingthefollowingitems:
ForNotificationTitleenterthetextthatappearsatthetopofthesign-innotification
page.
IntheProceedButtonbox,enterthetextforthebuttonthattheuserclicksto
proceedwiththesign-in.
Optionally,clearthecheckboxforDisplay“Decline”Button.Ifthisboxisnot
checked,theuserdoesnothavetheoptiontodecline.
IntheDeclineButtonbox,enterthetextforthebuttonthattheuserclickstodecline.
IntheMessageonDeclinebox,enterthetextthatyouwouldliketoappearwhen
auserclickstheDeclinebutton.
12.
ClickSaveChanges.
NOTE: IfyouhavechosenUsetheSign-inNotificationassociatedtothe
assignedroleyoumustcompletetheimplementationbyselectingthe
sign-innotificationontheUsers>UserRoles>RoleName>General>UI
Optionspageoftheadminconsole.
Ifmorethanoneroleisavailabletoauser,thesign-innotification
associatedwiththefirstroleassignedisdisplayed.
13.
Addthesign-inpageinwhichyouhavecustomizedthesign-innotificationappearance
tothesign-inpolicy.
Definingauthorization-onlyaccesspolicies
Authorization-onlyaccessissimilartoareverseproxy.Typically,areverseproxyisaproxy
serverthatisinstalledinfrontofwebservers.AllconnectionscomingfromtheInternet
addressedtooneofthewebserversareroutedthroughtheproxyserver,whichmayeither
dealwiththerequestitselforpasstherequestwhollyorpartiallytothemainwebserver.
Upto1000concurrentconnectionsissupportedonanSA6500.
247
Copyright©2012,JuniperNetworks,Inc.
Chapter10:Sign-InPolicies
C# Image: Zoom Image and Document Page in C#.NET Web Viewer
is designed to help developer view source image or document page by adjusting the target file enlarge or reduce the source file until the file size fits the
adjust pdf page size; change pdf page size
VB.NET Excel: VB Methods to Set and Customize Excel Rendering
we treat every single Excel spreadsheet as a page in our VB the fixed image size ration that the size is limited Thus, when VB.NET users are adjusting the image
change page size pdf; change font size pdf text box
Withanauthorization-onlyaccess,youselectauserrole.SecureAccessthenactsas
reverseproxyserverandperformsauthorizationagainsttheNetegritySiteMinderserver
foreachrequest.
Forexample,theauthorization-onlyaccessfeaturesatisfiesthefollowingbusinessneeds:
Ifyouhaveathird-partyAAApolicymanagementserver(likeNetegrity),SecureAccess
actsasanauthorization-onlyagent.
Ifyourusersessionsaremanagedbyathird-partsessionmanagementsystem,there
isnoneedtoduplicatetheusersessionmanagementinSecureAccess.
Withauthorization-onlyaccess,thereisnoSSOfromSecureAccess.SSOiscontrolled
byyourthird-partyAAAinfrastructure.
NOTE: Beforedefiningthispolicy,youmustfirstconfigureyourNetegrity
serveranddefineyourhostnamesintheNetworkConfigurationpage.
YoumustalsospecifysettingsintheSiteMinderauthorizationsettingssection
oftheSiteMinderauthenticationserverpage.UsersareredirectedtotheURL
specifiedintheIfAutomaticSignInfails,redirecttofieldwhenthe
SMSESSIONcookievalidationfailsorifnoSMSESSIONcookieexists.Users
areredirectedtotheURLspecifiedintheIfauthorizationfails,redirecttofield
whenanaccessdeniederroroccurs.
Tocreateorconfigureauthorization-onlyaccesspolicies:
1.
Intheadminconsole,chooseAuthentication>SigningIn>Sign-inPolicies.
2.
Tocreateanewauthorizationonlyaccesspolicy,clickNewURLandselect
authorizationonlyaccess.Or,toeditanexistingpolicy,clickaURLintheVirtual
Hostnamecolumn.
3.
IntheVirtualHostnamefield,enterthenamethatmapstoSecureAccess’sIPaddress.
Thenamemustbeuniqueamongallvirtualhostnamesusedinpass-throughproxy’s
hostnamemode.Thehostnameisusedtoaccessbackendapplicationenteredinthe
BackendURLfield.Donotincludetheprotocol(forexample,http:)inthisfield.
Forexample,ifthevirtualhostnameismyapp.ivehostname.com,andthebackend
URLishttp://www.xyz.com:8080/,arequesttohttps://myapp.ivehostname.com/test1
viaSecureAccessisconvertedtoarequesttohttp://www.xyz.com:8080/test1.The
responseoftheconvertedrequestissenttotheoriginalrequestingwebbrowser.
4.
IntheBackendURLfield,entertheURLfortheremoteserver.Youmustspecifythe
protocol,hostnameandportoftheserver.Forexample,
http://www.mydomain.com:8080/*.
WhenrequestsmatchthehostnameintheVirtualHostnamefield,therequestis
transformedtotheURLspecifiedintheBackendURLfield.Theclientisdirectedto
thebackendURLunawareoftheredirect.
5.
(optional)EnteraDescriptionforthispolicy.
Copyright©2012,JuniperNetworks,Inc.
248
JunosPulseSecureAccessServiceAdministrationGuide
View Images & Documents in Web Image Viewer | Online Tutorials
control add-on offers developers three different APIs for adjusting image viewing size. developers to adjust the width of current displayed page to the
apple compress pdf; change paper size in pdf
VB.NET Image: Image Resizer Control SDK to Resize Picture & Photo
VB.NET Code for Adjusting Image Size. In order to We are dedicated to provide powerful & profession imaging controls, PDF document, image to pdf files and
pdf compression settings; change font size in fillable pdf form
6.
SelecttheservernameorNoAuthorizationfromtheAuthorizationServerdropdown
menu.Ifyouselectaserver,ensurethatthefront-endserverprovidestheSMSESSION
cookieotherwiseyouwillreceiveanerror.
7.
SelectauserrolefromtheRoleOptiondropdownmenu.
Onlythefollowinguserroleoptionsareapplicableforauthorization-onlyaccess.
Allowbrowsingun-trustedSSLwebsites(Users>UserRoles>RoleName>Web
>Options>Viewadvancedoptions)
HTTPConnectionTimeout(Users>UserRoles>RoleName>Web>Options>
Viewadvancedoptions)
SourceIPrestrictions(Users>UserRoles>RoleName>General>Restrictions)
Browserrestrictions(Users>UserRoles>RoleName>General>Restrictions)
EnsuretheuserroleyouselecthasanassociatedWebAccesspolicy.
8.
SelecttheAllowActiveSyncTrafficonlyoptiontoperformabasicofvalidationof
theHTTPheadertoensuretherequestisconsistentwithActiveSyncprotocol.Ifyou
selectthisoptiononlyActiveSyncprotocolrequestscanbeprocessed.Ifvalidation
fails,amessageiscreatedintheuser’seventlog.Ifyoudonotselectthisoption,both
ActiveSyncandnon-ActiveSyncrequestsareprocessed.
9.
ClickSaveChangestosaveyouredits.
TheSystemStatusOverviewpagedisplaysthenumberofcurrentactiveconcurrent
connectionsandahistogramoftheactiveconcurrentconnections(AuthorizationOnly
AccessActiveConnectionsplotintheConcurrentSSLConnectionsgraph).
Related
Documentation
eTrustSiteMinderOverviewonpage187
SpecifyingWebBrowsingOptionsonpage428
SpecifyingBrowserAccessRestrictionsonpage69
DefiningMeetingSign-InPolicies
Tocreateorconfiguremeetingsign-inpolicies:
1.
Intheadminconsole,chooseAuthentication>Authentication>SigningInPolicies.
2.
Tocreateanewsign-inpolicy,clickNewURL.Or,toeditanexistingpolicy,clickaURL
intheMeetingURLscolumn.
3.
SelectMeeting.
4.
IntheSign-inURLfield,entertheURLthatyouwanttoassociatewiththemeeting
policy.Usetheformat<host>/<path>where<host>isthehostnameoftheSecure
Accessdevice,and<path>isanystringyouwantuserstoenter.Forexample:
Partner1.YourCompany.com/OnlineConference.WhencreatingthemeetingURL,note
that:
249
Copyright©2012,JuniperNetworks,Inc.
Chapter10:Sign-InPolicies
VB.NET Image: How to Process & Edit Image Using VB.NET Image
vintage effect creating, image color adjusting and image VB.NET image editor control SDK online tutorial page. functions into several small-size libraries that
.pdf printing in thumbnail size; change font size fillable pdf
C# Image: How to Add Customized Web Viewer Command in C#.NET
Able to adjust the displaying image size and style button for deleting an existing page from web other options for you, such as adjusting toolbar, controlling
reader shrink pdf; advanced pdf compressor online
YoucannotmodifytheURLofthedefaultmeetingURL(*/meeting)thatcomes
withtheproduct.
Ifyouwanttoenableuserstosignintomeetingsusingallofthehostnamesdefined
intheassociateduserURL,usethe*wildcardcharacterinyourmeetingURL
definition.Forexample,youmightassociatethefollowinghostswithyouruserURL:
YourInternalServer.YourCompany.net
YourExternalServer.YourCompany.com
Then,ifyoucreatean*/OnlineConferencemeetingURLdefinitionandassociateit
withtheuserURL,userscanaccessthemeetingsign-inpageusingeitherofthe
followingURLs:
http://YourInternalServer.YourCompany.net/OnlineConference
http://YourExternalServer.YourCompany.com/OnlineConference
IfyoucreateameetingURLthatincludesthe*wildcardcharacterandenableemail
notifications,SecureAccessconstructsthemeetingURLinthenotificationemail
usingthehostnamespecifiedbytheuserwhensigningintoSecureAccess.For
instance,ausermightsignintoSecureAccessusingthefollowingURLfromthe
previousexample:
http://YourInternalServer.YourCompany.net
Then,iftheusercreatesameeting,SecureAccessspecifiesthefollowingsign-in
URLforthatmeetingintheemailnotification:
http://YourInternalServer.YourCompany.net/OnlineConference
Notethatsincetheemaillinkreferencesaninternalserver,out-of-networkusers
cannotaccessthemeeting.
Ifyouonlywanttoenableuserstosignintomeetingsusingasub-setofthehost
namesdefinedintheassociateduserURL,orifyouwanttorequireuserstousea
completelydifferentURLtosignintomeetings,donotincludethe*wildcard
characterinyourmeetingURLdefinition.Instead,createauniqueandspecific
meetingURLdefinition.
Forinstance,youcancreatethefollowingmeetingURLdefinitionandassociateit
withtheuserURLfromthepreviousexampleinordertospecifythatallmeetings
containlinkstotheexternalserveronly:
YourExternalServer.YourCompany.com/OnlineConference
5.
(optional)EnteraDescriptionforthepolicy.
6.
FromtheSign-inPagelist,selectthesign-inpage(s)thatyouwanttoappeartousers
whoaccessmeetingsusingthispolicy.Youmayselectthedefaultpagesthatcome
withSecureAccess,avariationofthestandardsign-inpages,orcustomizedpages
thatyoucreateusingthecustomizableUIfeature.
7.
ClickSaveChanges.
Copyright©2012,JuniperNetworks,Inc.
250
JunosPulseSecureAccessServiceAdministrationGuide
VB.NET Image: VB.NET Rectangle Annotation Imaging Control
New RectangleAnnotation() ' set annotation size obj.X rectangle annotation by adjusting annotation properties profession imaging controls, PDF document, image
change font size in pdf file; change font size on pdf text box
VB.NET PDF: How to Create Watermark on PDF Document within
add text or image as a watermark on PDF page using VB be used as a text watermark; Support adjusting text font style in VB class, like text size and color;
change font size pdf form; adjust size of pdf file
Related
Documentation
ConfiguringSign-Inpagesonpage251
ConfiguringSign-Inpages
Asign-inpagedefinesthecustomizedpropertiesintheend-user’swelcomepagesuch
asthewelcometext,helptext,logo,header,andfooter.TheSAallowsyoutocreatetwo
typesofsign-inpagestopresenttousersandadministrators:
Standardsign-inpages—Standardsign-inpagesareproducedbyJuniperandare
includedwithallversionsoftheSA.Youcanmodifystandardsign-inpagesthrough
theAuthentication>SigningIn>Sign-inPagestaboftheadminconsole.
Customizedsign-inpages—Customizedsign-inpagesareTHTMLpagesthatyou
produceusingtheTemplateToolkitanduploadtotheSAintheformofanarchived
ZIPfile.Thecustomizedsign-inpagesfeatureenablesyoutouseyourownpagesrather
thanhavingtomodifythesign-inpageincludedwiththeSA.
Formoreinformationoncustomizedsign-inpages,seetheCustomSign-InPagesSolution
Guide.
ConfiguringStandardSign-InPages
Standardsign-inpagesthatcomewiththeSAinclude:
DefaultSign-InPage—theSAdisplaysthispagetouserswhentheysignintotheSA.
MeetingSign-InPage—theSAdisplaysthispagetouserswhentheysignintoameeting.
ThispageisonlyavailableifyouinstallaSecureMeetinglicenseontheSA.
Youcanmodifythedefaultsign-inpagethattheSAdisplaystouserswhentheysign
intotheSA.Youcanalsocreatenewstandardsigninpagesthatcontaincustomtext,
logo,colors,anderrormessagetextusingsettingsintheAuthentication>SigningIn>
Sign-inPagestaboftheadminconsole.
Tocreateormodifyastandardsign-inpage:
1.
Intheadminconsole,selectAuthentication>SigningIn>Sign-inPages.
2.
Ifyouare:
Creatinganewpage—ClickNewPage.
Modifyinganexistingpage—Selectthelinkcorrespondingtothepageyouwant
tomodify.
3.
(Newpagesonly)UnderPageType,specifywhetherthisisanadministrator/user
accesspageorameetingpage.
4.
Enteranametoidentifythepage.
5.
IntheCustomtextsection,revisethedefaulttextusedforthevariousscreenlabels
asdesired.WhenaddingtexttotheInstructionsfield,notethatyoumayformattext
andaddlinksusingthefollowingHTMLtags:<i>,<b>,<br>,<font>,and<ahref>.
However,theSAdoesnotrewritelinksonthesign-inpage(sincetheuserhasnotyet
251
Copyright©2012,JuniperNetworks,Inc.
Chapter10:Sign-InPolicies
authenticated),soyoushouldonlypointtoexternalsites.Linkstositesbehinda
firewallwillfail.
IfyouuseunsupportedHTMLtagsinyourcustommessage,theSAmaydisplaythe
end-user’sSAhomepageincorrectly.
6.
IntheHeaderappearancesection,specifyacustomlogoimagefilefortheheader
andadifferentheadercolor.
7.
IntheCustomerrormessagessection,revisethedefaulttextthatisdisplayedtousers
iftheyencountercertificateerrors.
Youcaninclude<<host>>,<<port>>,<<protocol>>,and<<request>>variablesand
userattributevariables,suchas<<userAttr.cn>>inthecustomerrormessages.Note
thatthesevariablesmustfollowtheformat<variable>todistinguishthemfromHTML
tagswhichhavetheformat<tag>.
8.
Toprovidecustomhelporadditionalinstructionsforyourusers,selectShowHelp
button,enteralabeltodisplayonthebutton,andspecifyanHTMLfiletouploadto
theSA.NotethattheSAdoesnotdisplayimagesandothercontentreferencedinthis
HTMLpage.(NotavailablefortheSecureMeetingsign-inpage.)
9.
ClickSaveChanges.Thechangestakeeffectimmediately,butuserswithactive
sessionsmightneedtorefreshtheirWebbrowsers.
ClickRestoreFactoryDefaultstoresetthesign-inpage,SAuserhomepage,andadmin
consoleappearance.
Copyright©2012,JuniperNetworks,Inc.
252
JunosPulseSecureAccessServiceAdministrationGuide
CHAPTER11
SingleSign-On
AboutSingleSign-Ononpage253
TaskSummary:ConfiguringMultipleAuthenticationServersonpage255
TaskSummary:EnablingSSOtoResourcesProtectedbyBasic
Authenticationonpage255
TaskSummary:EnablingSSOtoResourcesProtectedbyNTLMonpage256
MultipleSign-InCredentialsExecutiononpage257
ConfiguringSAMLonpage262
ConfiguringSAMLSSOProfilesonpage265
CreatingaSingleSign-OnPOSTProfileonpage269
CreatingaSAMAccessControlResourcePolicyonpage272
CreatingaTrustRelationshipBetweenSAML-EnabledSystemsonpage275
AboutSingleSign-On
Singlesign-on(SSO)isaprocessthatallowspre-authenticatedSecureAccessusersto
accessotherapplicationsorresourcesthatareprotectedbyanotheraccessmanagement
systemwithouthavingtore-entertheircredentials.
SecureAccessprovidesseveralintegrationmechanismsthatallowyoutoconfigureSSO
connectionsfromtheSecureAccesstootherservers,applications,andresources.SSO
mechanismsinclude:
RemoteSSO—SecureAccessprovideslooseintegrationwithanyapplicationthatuses
astaticPOSTactionwithinanHTMLformtosigninusers.YoucanconfigureSecure
AccesstopostSecureAccesscredentials,LDAPattributes,andcertificateattributes
toaWeb-enabledapplication,aswellassetcookiesandheaders,allowingusersto
accesstheapplicationwithoutre-authenticating.
SAML—SecureAccessprovideslooseintegrationwithselectedaccessmanagement
systemsthatusetheSecurityAssertionMarkupLanguage(SAML)tocommunicate
withothersystems.YoucanenableuserstosignintoSecureAccessandthensignin
toandaccessresourcesprotectedbytheaccessmanagementsystemwithout
re-authenticating.Youcanalsoenableuserstosignintoanotheraccessmanagement
systemandthenaccessresourcesprotectedbySecureAccess,without
re-authenticating.
253
Copyright©2012,JuniperNetworks,Inc.
BasicauthenticationandNTLMintermediationtoIntranetsites—SecureAccessallows
youtoautomaticallysubmitSecureAccessusercredentialstootherWebsitesand
proxieswithinthesameIntranetzone.Whenyouenablebasicauthentication
intermediationthroughtheUsers>ResourceProfiles>WebApplications/Pagespage
oftheadminconsole,SecureAccesssubmitsthecachedcredentialstoIntranetWeb
siteswhosehostnamesendintheDNSsuffixconfiguredintheSystem>Network>
Overviewpage.Tomaximizesecurity,youmayalsoconfigureSecureAccesstouse
base-64encodingtoprotectthecachedcredentials.
ActiveDirectoryserver—SecureAccessallowsyoutoautomaticallysubmitActive
DirectorySSOcredentialstootherWebsitesandWindowsfileshareswithinthesame
IntranetzonethatareprotectedbynativeNTLMauthentication.Whenyouenablethis
option,SecureAccesssubmitscachedcredentialstoNTLM-protectedWebsiteswhose
hostnamesendintheDNSsuffixconfiguredintheSystem>Network>Overviewpage
oftheadminconsole.
eTrustSiteMinderpolicyserver—WhenyouauthenticateSecureAccessusersusinga
eTrustSiteMinderpolicyserver,youcanenablethemaccesstoSiteMinderprotected
resourceswithoutre-authenticating(providedtheyareauthorizedwiththecorrect
protectionlevel).Additionally,youcanre-authenticateusersthroughSecureAccess
iftheyrequestresourcesforwhichtheircurrentprotectionlevelisinadequateandyou
canenableuserstosignintothepolicyserverfirstandthenaccessSecureAccess
withoutre-authenticating.
TerminalSessions—WhenyouenabletheTerminalServicesfeatureforarole,you
allowuserstoconnecttoapplicationsthatarerunningonaWindowsterminalserver
orCitrixMetaFrameserverwithoutre-authenticating.Youmayalsopassausername
totheTelnet/SSHserver.
Emailclients—WhenyouenabletheEmailClientfeatureforaroleandthencreatea
correspondingresourcepolicy,youallowuserstoaccessstandards-basedemailsuch
asOutlookExpress,NetscapeCommunicator,orQualcomm’sEudorawithout
re-authenticating.
SecureAccessdetermineswhichcredentialstosubmittotheSSO-enabledserver,
application,orresourcebasedonthemechanismyouusetoconnect.Mostmechanisms
allowyoutocollectusercredentialsforuptotwoauthenticationserversintheSecure
Accesssign-inpageandthensubmitthosecredentialsduringSSO.
Theremainingmechanisms(SAML,eTrustSiteMinder,andtheEmailClient)useunique
methodsforenablingSSOfromSecureAccesstothesupportedapplication.
AboutMultipleSign-InCredentials
Whenconfiguringanauthenticationrealm,youcanenableuptotwoauthentication
serversfortherealm.Enablingtwoauthenticationserversallowsyoutorequiretwo
differentsetsofcredentials—oneforSecureAccessandanotherforyourSSO-enabled
resource—withoutrequiringtheusertoenterthesecondsetofcredentialswhenaccessing
theresource.Italsoallowsyoutorequiretwo-factorauthenticationinordertoaccess
SecureAccess.
Copyright©2012,JuniperNetworks,Inc.
254
JunosPulseSecureAccessServiceAdministrationGuide
Documents you may be interested
Documents you may be interested