asp.net pdf reader : Adjusting page size in pdf software SDK dll winforms wpf .net web forms j-sa-sslvpn-7.1-adminguide47-part767

matchestheresourcerequestedbytheusertoaresourceinapolicy’s(oradetailed
rule’s)Resourcelist,itperformsthespecifiedactionandstopsprocessingpolicies.
Related
Documentation
DefiningaResourceProfileonpage6
CreatingDetailedRulesforResourcePoliciesonpage137
DefiningSingleSign-OnPolicies
Singlesign-onpoliciesenableyoutoautomaticallypassusercredentialstotheWeb
applicationspecifiedinyourpolicy.Youcanconfiguresinglesign-onpoliciestointercept
basicauthentication,KerberosandNTLMchallengesanddisplayanintermediatesign-in
pagetocollectcredentialsfortheWebresource.Or,youcanpostthecredentialsand
headersthatyouspecifytotheWebapplication.
Related
Documentation
AboutBasic,NTLMandKerberosResourcesonpage435
WritingtheBasic,NTLMandKerberosResourcesonpage436
WritingaBasicAuthentication,NTLMorKerberosIntermediationResourcePolicyon
page440
WritingaRemoteSSOFormPOSTResourcePolicyonpage443
WritingaRemoteSSOHeaders/CookiesResourcePolicyonpage445
AboutBasic,NTLMandKerberosResources
UsetheSSO>Generaltabtosetupthebasic,NTLMandKerberoscredentials.The
credentialsyoudefinehereareusedwhendefiningWebresourceprofileswithSSO
autopoliciesandWebresourcepolicies.
ThefollowingoutlinesthebasicideasbehindthehandlingofSSO:
TheSASeriesAppliancewilldoKerberosifchallengedwithNegotiateheader,NTLM
ifchallengedwithNTLMheaderandBasicAuthifchallengedwithBasic.
IftheSASeriesAppliancereceivesmultiplechallenges,theorderofpreferenceis:
Kerberos
NTLM
Basic
TheSASeriesAppliancewillfirsttryconstraineddelegationiftheserviceisconfigured
inaservicelist.
PolicyconfigurationsoverrideanysettingsintheSSO>Generaltab.
DisablingSSOordisablingallsectionsintheGeneraltabpreventssinglesign-on.
However,theSASeriesAppliancewillcontinuetointermediateanddisplayan
intermediationpagetotheend-user.
435
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
Adjusting page size in pdf - Compress reduce PDF size in C#.net, ASP.NET, MVC, Ajax, WinForms, WPF
C# Code & .NET API to Compress & Decompress PDF Document
batch reduce pdf file size; advanced pdf compressor
Adjusting page size in pdf - VB.NET PDF File Compress Library: Compress reduce PDF size in vb.net, ASP.NET, MVC, Ajax, WinForms, WPF
VB.NET PDF Document Compression and Decompression Control SDK
pdf font size change; batch pdf compression
Basicauthenticationintermediationcanbeexplicitlyturnedoffinapolicy.Forkerberos
andNTLM,theSASeriesAppliancewillalwaysintermediate.
DependingontheSSOused,theintermediationpagewillshowdifferentfieldsforthe
end-usertocomplete:
Basicauthenticationintermediationpagedisplaysusernameandpasswordfields
NTLMintermediationpagedisplaysusername,passwordanddomainfields
Kerberosintermediationpagedisplaysusername,passwordandrealmfields
Forconstraineddelegation,youmustdefinedapolicyandspecifyroles.Enteringdata
intheGeneraltabonlyisnotsufficient.
Ifnopoliciesareconfiguredforsinglesign-on,theSASeriesApplianceusesthedefault
systemcredentials.
Ifcredentialsaredefined,theorderofpreferenceis:
Systemcredentials
Variablecredentials
Fixedorstaticcredentials
Forfixedorstaticcredentials,youmustdefinedapolicyandspecifyroles.Entering
dataintheGeneraltabonlyisnotsufficient.
Ifthereisapolicymatch,thecredentialandprotocolofthepolicyisused.Ifthepolicy
failstoauthenticate,thefallbackmechanismdefinedinthepolicyisused.Ifthepolicy
protocoldoesnotmatchtheprotocolofthechallenge,thelogicdefinedintheGeneral
tabisused.
WhenupgradinganSASeriesApplianceorperforminganewinstall,thedefaultSSO
policyofBasicAuthNoSSOispreserved.EvenifallsectionsoftheGeneraltabare
enabled,SSOwillnotbeenableduntiltheBasicAuthNoSSOpolicyisdeleted.
Related
Documentation
WritingtheBasic,NTLMandKerberosResourcesonpage436
DefiningSingleSign-OnPoliciesonpage435
WritingtheBasic,NTLMandKerberosResources
Tosetupthebasic,NTLMandKerberosresources:
1.
Intheadminconsole,selectUsers>ResourcePolicies>Web.
2.
IfyouradministratorviewisnotalreadyconfiguredtoshowSSOpolicies,makethe
followingmodifications:
a.
ClicktheCustomizebuttonintheupperrightcornerofthepage.
b.
SelecttheSSOcheckbox.
Copyright©2012,JuniperNetworks,Inc.
436
JunosPulseSecureAccessServiceAdministrationGuide
C# PDF copy, paste image Library: copy, paste, cut PDF images in
one. Easy to zoom and crop image for adjusting image size. Besides C#.NET Project DLLs: Copy, Paste, Cut Image in PDF Page. In
change font size pdf form; can pdf files be compressed
VB.NET Image: Generate GS1-128/EAN-128 Barcode on Image & Document
width & height and four margin size in a EAN-128 barcode on multi-page TIFF/PDF/Word documents such as removing the document noise, adjusting page color mode
pdf change page size; change file size of pdf document
c.
SelecttheGeneralcheckboxbelowtheSSOcheckbox.
d.
ClickOK.
3.
SelecttheSSO>Generaltab.
4.
SelectEnablekerberostoenableKerberosSSO.Youcanthendefinethetypeof
intermediation:constraineddelegationorSASeriesAppliance.Ifyoudonotdefine
anyintermediationtypes,theSASeriesApplianceattemptstofigureouttherealm
fromthehostnameandperformsSSOusingthesystemcredentials.
Forrealmintermediation,enterthefollowingandclickAdd:
Realm—EntertheKerberosrealmname.Forexample,KERBER.NET.TheSASeries
AppliancewilluseKERBER.NETtoobtainthelistofKeyDistributionCenters(KDCs).
SiteName—(optional)EntertheActiveDirectorysitenames.Usethisfieldtohave
theSASeriesAppliancecontacttheKDCataspecificsite.Forexample,ifsitename
isSunnyvaleandrealmisKERBER.NET,thentheSASeriesApplianceuses
Sunnyvale•KERBER.NETtogetalistofKDCs.NotethattheActiveDirectorymust
havethesitesdefinedandDNSshouldbeconfiguredtoreturntheKDCsinthesite.
PatternList—EnterthehostnamesmappedtotheKerberosrealm.Youcanenter
wildcardcharacters,suchas*.y.com,*.kerber.net,or*.*.Notethefollowing:
Makesurethatrealmstonothavehostnamesmatchingasubsetofthepatterns
definedforanotherrealm.
YoudonotneedtodefineapatternifallserversfollowthemirroredDNS
namespaceconvention.TheSASeriesAppliancewilldeterminetherealmfrom
thehostname.
Alldisjoinedhostnamepatternsmustbedefined.
Youcanuse*asthedefaultrealm.Donotlistmorethanone*whendefining
multiplerealms.
KDC—EnterthehostnameorIPaddressoftheKeyDistributionCentersifDNSis
unavailableorifyouwanttheSASeriesAppliancetocontactaspecificKDCfor
tickets.IfyouenteraKDC,theSASeriesAppliancewillnotuseDNStoobtainthe
listofKDCsbasedonthevaluesenteredintheSiteNameandRealmfields.
Forconstraineddelegationintermediation,enterthefollowingandclickAdd:
Label—Enteranametouniquelyidentifythisrow.Noexternalmappingismadeto
thelabelvalue.
Realm—Selecttherealmtouse.Thedrop-downlistispopulatedbyvaluesinthe
RealmDefinitiontable.
PrincipalAccount—EntertheconstraineddelegationaccounttheSASeries
Applianceusestogetconstraineddelegationticketsonbehalfoftheuser.
437
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
C# Image: Zoom Image and Document Page in C#.NET Web Viewer
is designed to help developer view source image or document page by adjusting the target file enlarge or reduce the source file until the file size fits the
change paper size in pdf; pdf compression settings
VB.NET Excel: VB Methods to Set and Customize Excel Rendering
we treat every single Excel spreadsheet as a page in our VB the fixed image size ration that the size is limited Thus, when VB.NET users are adjusting the image
acrobat compress pdf; change font size in pdf file
Password—Entertheconstraineddelegationaccountpassword.
ServiceList—Selecttheservicelisttouse.ClickEdittodefineanduploadservice
lists.ThelistshouldbeanexactmatchwiththeservicelistinActiveDirectoryifyou
wanttheSASeriesAppliancetoperformconstraineddelegationforalltheservices.
Hostnamesmustbeanexactmatch.
Formoreinformationaboutconstraineddelegation,see
http://msdn.microsoft.com/en-us/library/aa480585.aspx.
ForSASeriesApplianceintermediation,enterthefollowingandclickAdd:
Label—Enteranametouniquelyidentifythisrow.Noexternalmappingismadeto
thelabelvalue.
Realm—Selecttherealmtouse.Thedrop-downlistispopulatedbyvaluesinthe
RealmDefinitiontable.
CredentialType—Selectoneofthefollowingcredentialtypes:
Systemcredentials—Usethesetofusercredentials,suchasprimaryand
secondaryauthorizationcredentials,storedontheSASeriesAppliance.Ifyou
selectthisoption,youdonotneedtoentervaluesintheUsernameandPassword
fields.
Variable—Allowtokenssuchas<username>and<password>tobeusedinthe
usernameandVariablePasswordfields.
Static—Usetheusernameandpasswordexactlyastheyareenteredinthe
usernameandpasswordfields.
UsernameandPassword—Entertheaccountusernameandpassword.Ifyouselect
Variableasthecredentialtype,youcanentertheusernametokenhere.Forexample,
<username>.
VariablePassword—IfyouselectVariableasthecredentialtype,enterthepassword
tokenhere.Forexample,<password>.
FallbacktoNTLMV2—SelectthisoptiontofallbacktoNTLMV2ifKerberosfails.
IfyoudonotselectthisoptionandKerberosSSOfails,anintermediationpage
appears.
5.
SelectEnableNTLMtoenableNTLMSSO.Ifyoudonotenteranyconfiguration
information,theSASeriesApplianceattemptstofigureoutthedomainfromthe
hostnameandperformsSSOusingthesystemcredentials.
NOTE: Donoteditordeletethedefaultsystemcredential.
Label—Enteranametouniquelyidentifythisrow.Noexternalmappingismadeto
thelabelvalue.
Domain—EntertheActiveDirectorydomainnamehere.
Copyright©2012,JuniperNetworks,Inc.
438
JunosPulseSecureAccessServiceAdministrationGuide
View Images & Documents in Web Image Viewer | Online Tutorials
control add-on offers developers three different APIs for adjusting image viewing size. developers to adjust the width of current displayed page to the
can a pdf file be compressed; best pdf compression tool
VB.NET Image: Image Resizer Control SDK to Resize Picture & Photo
VB.NET Code for Adjusting Image Size. In order to We are dedicated to provide powerful & profession imaging controls, PDF document, image to pdf files and
reader compress pdf; pdf change font size in textbox
CredentialType—Selectoneofthefollowingcredentialtypes:
Systemcredentials—Usethesetofusercredentials,suchasprimaryand
secondaryauthorizationcredentials,storedontheSASeriesAppliance.Ifyou
selectthisoption,youdonotneedtoentervaluesintheUsernameandPassword
fields.
Variable—Allowtokenssuchas<username>and<psasword>tobeusedinthe
UsernameandVariablePasswordfields.
Static—Usetheusernameandpasswordexactlyastheyareenteredinthe
usernameandpasswordfields.
UsernameandPassword—Entertheaccountusernameandpassword.Ifyouselect
Variableasthecredentialtype,youcanentertheusernametokenhere.Forexample,
<username>.
VariablePassword—IfyouselectVariableasthecredentialtype,enterthepassword
tokenhere.Forexample,<password>.
FallbacktoNTLMV1—SelectthisoptiontofallbacktoNTLMV1ifSSOfails.Ifyou
donotselectthisoptionandSSOfails,onlyNTLMV2isattempted.Anintermediation
pageappearsifNTLMV2fails.
6.
SelectEnableBasicAuthenticationtoenablebasicauthenticationSSO.Ifyouselect
thisoptionbutdonotsetupanyconfigurationdata,theSASeriesAppliancewill
attemptSSOusingsystemcredentials.
NOTE: Donoteditordeletethedefaultsystemcredential.
Label—Enteranametouniquelyidentifythisrow.Noexternalmappingismadeto
thelabelvalue.
CredentialType—Selectoneofthefollowingcredentialtypes:
Systemcredentials—Usethesetofusercredentials,suchasprimaryand
secondaryauthorizationcredentials,storedontheSASeriesAppliance.Ifyou
selectthisoption,youdonotneedtoentervaluesintheUsernameandPassword
fields.
Variable—Allowtokenssuchas<username>and<psasword>tobeusedinthe
UsernameandVariablePasswordfields.
Static—Usetheusernameandpasswordexactlyastheyareenteredinthe
usernameandpasswordfields.
UsernameandPassword—Entertheaccountusernameandpassword.Ifyouselect
Variableasthecredentialtype,youcanentertheusernametokenhere.Forexample,
<username>.
439
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
VB.NET Image: How to Process & Edit Image Using VB.NET Image
vintage effect creating, image color adjusting and image VB.NET image editor control SDK online tutorial page. functions into several small-size libraries that
pdf optimized format; best compression pdf
C# Image: How to Add Customized Web Viewer Command in C#.NET
Able to adjust the displaying image size and style button for deleting an existing page from web other options for you, such as adjusting toolbar, controlling
pdf file compression; advanced pdf compressor online
VariablePassword—IfyouselectVariableasthecredentialtype,enterthepassword
tokenhere.Forexample,<password>.
PatternList—EnterthehostnamesmappedtotheKerberosrealm.Youcanenter
wildcardcharacters,suchas*.y.com,*.kerber.net,or*.*.Notethefollowing:
Makesurethatrealmstonothavehostnamesmatchingasubsetofthepatterns
definedforanotherrealm.
YoudonotneedtodefineapatterifallserversfollowthemirroredDNS
namespaceconvention.TheSASeriesAppliancewilldeterminetherealmfrom
thehostname.
Alldisjoinedhostnamepatternsmustbedefined.
Youcanuse*asthedefaultrealm.Donotlistmorethanone*whendefining
multiplerealms.
Youcanuse*asthedefaultdomain.Donotlistmorethanone*whendefining
multipledomains.
Related
Documentation
UsingSystemVariablesinRealms,Roles,andResourcePoliciesonpage1022
AboutSingleSign-Ononpage253
WritingaBasicAuthentication,NTLMorKerberosIntermediationResourcePolicy
BasicAuthentication,NTLMorKerberosIntermediationresourcepoliciesenableyouto
controlNTLMandKerberosintermediationontheSASeriesAppliance.Ifauseraccesses
aWebresourcethatsendsabasicauthenticationchallenge,theSASeriesAppliance
caninterceptthechallenge,displayanintermediatesign-inpagetocollectcredentials
fortheWebresource,andthenrewritethecredentialsalongwiththeentire
challenge/responsesequence.
TheinitialHTTPrequestgeneratedforanNTLMprotectedservershouldbeforarequest
thatresultsinHTMLcontent.IfSSOisnotenabledoriftheSSOcredentialsfail,theSA
SeriesAppliancerespondswithanHTMLpagetogatherusercredentials.Ifthebrowser
isexpectingnon-HTMLcontent,thebrowserrejectstheresponseandthenavigationto
theresourcefails.
WiththeKerberosIntermediationresourcepolicy,backendwebapplicationsprotected
byKerberosareaccessibletoendusers.Forexample,auserlogsintotheSASeries
ApplianceusingActiveDirectoryastheauthenticationserverandtheauthentication
protocolisKerberos.WhentheuserbrowsestoaKerberos-protectedserver,theuseris
single-signedontothebackendserverandisnotpromptedforcredentials.Or,ifauser
logsintotheSASeriesApplianceusinganauthenticationprotocolotherthanKerberos
andthenbrowsestoaKerberos-protectedserver.DependingonthesettingsinKerberos
IntermediationresourcepolicyandtheconfiguredKerberosauthenticationserver,the
userwilleitherbeauthenticatedbytherewriterortheuserwillbepromptedtoentera
usernameandpassword.
Copyright©2012,JuniperNetworks,Inc.
440
JunosPulseSecureAccessServiceAdministrationGuide
VB.NET Image: VB.NET Rectangle Annotation Imaging Control
New RectangleAnnotation() ' set annotation size obj.X rectangle annotation by adjusting annotation properties profession imaging controls, PDF document, image
best way to compress pdf; change page size of pdf document
VB.NET PDF: How to Create Watermark on PDF Document within
add text or image as a watermark on PDF page using VB be used as a text watermark; Support adjusting text font style in VB class, like text size and color;
best pdf compressor; pdf markup text size
TowriteaBasicAuthentication,NTLMorKerberosIntermediationresourcepolicy:
1.
Intheadminconsole,selectUsers>ResourcePolicies>Web.
2.
IfyouradministratorviewisnotalreadyconfiguredtoshowSSOpolicies,makethe
followingmodifications:
a.
ClicktheCustomizebuttonintheupperrightcornerofthepage.
b.
SelecttheSSOcheckbox.
c.
SelecttheKerberos/BasicAuth/NTLMcheckboxbelowtheSSOcheckbox.
d.
ClickOK.
3.
SelecttheSSO>Kerberos/NTLM/BasicAuthtab.
4.
ClickNewPolicy.
5.
Enteranametolabelthispolicy(required)andadescriptionofthepolicy(optional).
6.
IntheResourcessection,specifytheresourcestowhichthispolicyapplies.
IfyouwanttheSASeriesAppliancetoautomaticallypostvaluestoaspecificURL
whenanend-userclicksonabookmark,theresourcethatyouenterheremustexactly
matchtheURLthatyouspecifyintheUsers>UserRoles>Role>Web>Bookmarks
pageoftheadminconsole.
7.
IntheRolessection,specify:
PolicyappliestoALLroles—Toapplythispolicytoallusers.
PolicyappliestoSELECTEDroles—Toapplythispolicyonlytouserswhoare
mappedtorolesintheSelectedroleslist.Makesuretoaddrolestothislistfrom
theAvailableroleslist.
PolicyappliestoallrolesOTHERTHANthoseselectedbelow—Toapplythispolicy
toallusersexceptforthosewhomaptotherolesintheSelectedroleslist.Make
suretoaddrolestothislistfromtheAvailableroleslist.
8.
IntheActionsection,specify:
DisableSSO—TheSASeriesAppliancedisablesautomaticSSOauthenticationfor
thisuserroleand,instead,promptstheuserforsign-incredentials.
Basic—ThisoptionspecifiesthattheSASeriesApplianceusetheBasic
AuthenticationIntermediationmethodtocontrolSSObehavior.
EnableIntermediation—Selectthecredentialstouse.Ifthispull-downmenuis
blank,nobasicauthenticationSSOsettingsaredefinedintheSSOGeneraltab.
DisableIntermediation—Whenyouselectthisoption,TheSASeriesAppliance
doesnotintermediatethechallenge/responsesequence.
TheSASeriesAppliancealwaysintermediatesrequeststoWebproxiesthat
requirebasicauthentication,evenifyouselectDisableIntermediation.
Althoughyouaregivenanoptiontodisablebasicauthenticationintermediation,
wedonotrecommendthisoption,asitisaveryinsecureauthenticationmethod
441
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
and,insomecases,cantransmitusercredentialsoverthenetworkinclear
(unencrypted)text.
NTLM—ThisoptionspecifiesthattheSASeriesApplianceusetheMicrosoftNTLM
IntermediationmethodtocontrolSSObehavior.
Selectthecredentialstouse.Ifthispull-downmenuisblank,noNTLMSSO
settingsaredefinedintheSSOGeneraltab.
SelecttheFallbacktoNTLMV1optiontotrybothNTLMV1andNTLMV2.Ifyou
donotselectthisoption,theSASeriesAppliancefallsbackonlytoNTLMV2.An
intermediationpageappearifSSOfails.
Kerberos—ThisoptionspecifiesthattheSASeriesApplianceusetheKerberos
IntermediationmethodtocontrolSSObehavior.
Selectthecredentialstouse.Ifthispull-downmenuisblank,nokerberosSSO
settingsaredefinedintheSSOGeneraltab
SelecttheFallbacktoNTLMV2optiontofallbackonlytoNTLMV2ifkerberos
fails.Ifyoudonotselectthisoption,aKerberosintermediationpageappearsif
KerberosSSOfails.
ConstrainedDelegation—ThisoptionspecifiesthattheSASeriesApplianceuse
theconstraineddelegationintermediationmethodtocontrolSSObehavior.
Selectthecredentialstouse.Ifthispull-downmenuisblank,noconstrained
delegationSSOsettingsaredefinedintheSSOGeneraltab.
SelecttheFallbacktoKerberosoptiontofallbacktoKerberosifconstrained
delegationfails.Ifyouselectthisoption,anintermediationpageappearsif
constraineddelegationfails.Ifyoudonotselectthisoptionandconstrained
delegationfails,anerrorpageappears.
UseDetailedRules—Tospecifyoneormoredetailedrulesforthispolicy.
9.
ClickSaveChanges.
10.
OntheBasicAuth,NTLMandKerberospoliciespage,orderthepoliciesaccordingto
howyouwanttheSASeriesAppliancetoevaluatethem.Keepinmindthatoncethe
SASeriesAppliancematchestheresourcerequestedbytheusertoaresourceina
policy’s(oradetailedrule’s)Resourcelist,itperformsthespecifiedactionandstops
processingpolicies.
Checktheactivityeventslistedintheuserlogifyouencounteranyproblems.
Related
Documentation
SpecifyingResourcesforaResourcePolicyonpage133
ResourcePolicyComponentsonpage132
WritingtheBasic,NTLMandKerberosResourcesonpage436
Copyright©2012,JuniperNetworks,Inc.
442
JunosPulseSecureAccessServiceAdministrationGuide
WritingaRemoteSSOFormPOSTResourcePolicy
RemoteSSOFormPOSTresourcepoliciesspecifyWebapplicationstowhichtheSA
SeriesAppliancepostsdata.Thisdatacanincludeauser’sSASeriesApplianceusername
andpassword,aswellassystemdatastoredbysystemvariables.
TowritearemoteSSOFormPOSTresourcepolicy:
1.
Intheadminconsole,navigatetoUsers>ResourcePolicies>Web.
2.
IfyouradministratorviewisnotalreadyconfiguredtoshowSSOpolicies,makethe
followingmodifications:
a.
ClicktheCustomizebuttonintheupperrightcornerofthepage.
b.
SelecttheSSOcheckbox.
c.
SelecttheFormPostcheckboxbelowtheSSOcheckbox.
d.
ClickOK.
3.
SelecttheSSO>FormPosttab.
4.
OntheFormPOSTPoliciespage,clickNewPolicy.
5.
Enteranametolabelthispolicy(required)andadescriptionofthepolicy(optional).
6.
IntheResourcessection,specifytheapplication’ssign-inpage,suchas:
http://yourcompany.com.
IfyouwanttheSASeriesAppliancetoautomaticallypostvaluestoaspecificURL
whenanend-userclicksonabookmark,theresourcethatyouenterheremustexactly
matchtheURLthatyouspecifyintheUsers>UserRoles>Role>Web>Bookmarks
pageoftheadminconsole.
7.
IntheRolessection,specify:
PolicyappliestoALLroles—Toapplythispolicytoallusers.
PolicyappliestoSELECTEDroles—Toapplythispolicyonlytouserswhoare
mappedtorolesintheSelectedroleslist.Makesuretoaddrolestothislistfrom
theAvailableroleslist.
PolicyappliestoallrolesOTHERTHANthoseselectedbelow—Toapplythispolicy
toallusersexceptforthosewhomaptotherolesintheSelectedroleslist.Make
suretoaddrolestothislistfromtheAvailableroleslist.
8.
IntheActionsection,specify:
PerformthePOSTdefinedbelow—TheSASeriesApplianceperformsaformPOST
withtheuserdataspecifiedinthePOSTdetailssectiontothespecifiedURLwhen
ausermakesarequesttoaresourcespecifiedintheResourceslist.
DoNOTperformthePOSTdefinedbelow—TheSASeriesAppliancedoesnot
performaformPOSTwiththeuserdataspecifiedinthePOSTdetailssection.
443
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
UseDetailedRules—Tospecifyoneormoredetailedrulesforthispolicy.
9.
InthePOSTdetailssection:
InthePOSTtoURLfield,specifytheabsoluteURLwheretheapplicationpoststhe
user’scredentials,suchas:http://yourcompany.com/login.cgi.Youcandetermine
theappropriateURLusingaTCPdumporbyviewingtheapplication’ssign-inpage
sourceandsearchingforthePOSTparameterintheFORMtag.(TheSASeries
Appliancedoesnotacceptwildcardcharactersinthisfield.)
CheckDenydirectloginforthisresourceifyoudonotwantuserstobeableto
accesstheURLdirectly.
SelecttheAllowmultiplePOSTstothisresourcecheckboxifyouwanttheSA
SeriesAppliancetosendPOSTandcookievaluestotheresourcemultipletimesif
required.Ifyoudonotselectthisoption,theSASeriesAppliancedoesnotattempt
singlesign-onwhenauserrequeststhesameresourcemorethanonceduringthe
samesession.
Specifytheuserdatatopostandusermodificationpermission:
Userlabel—Thelabelthatappearsonauser’sPreferencespageintheSASeries
Appliance.Thisfieldisrequiredifyoueitherenableorrequireuserstomodifydata
toposttoback-endapplications.
Name—ThenametoidentifythedataoftheValuefield.(Theback-endapplication
shouldexpectthisname.)
Value—ThevaluetoposttotheformforthespecifiedName.Youcanenterstatic
data,asystemvariable,orSASeriesAppliancesessionvariablescontaining
usernameandpasswordvalues.
Usermodifiable?setting—SettoNotmodifiableifyoudonotwanttheuserto
beabletochangetheinformationintheValuefield.SettoUserCANchange
valueifyouwanttheusertohavetheoptionofspecifyingdataforaback-end
application.SettoUserMUSTchangevalueifusersmustenteradditionaldata
inordertoaccessaback-endapplication.Ifyouchooseeitherofthelattersettings,
afieldfordataentryappearsontheuser’sAdvancedPreferencespageintheSA
SeriesAppliance.ThisfieldislabeledusingthedatayouenterintheUserlabel
field.IfyouenteravalueintheValuefield,thisdataappearsinthefieldbutis
editable.
10.
ClickSaveChanges.
11.
OntheFormPOSTPoliciespage,orderthepoliciesaccordingtohowyouwantthe
SASeriesAppliancetoevaluatethem.KeepinmindthatoncetheSASeriesAppliance
matchestheresourcerequestedbytheusertoaresourceinapolicy’s(oradetailed
rule’s)Resourcelist,itperformsthespecifiedactionandstopsprocessingpolicies.
Related
Documentation
RemoteSSOOverviewonpage407
SpecifyingResourcesforaResourcePolicyonpage133
WritingaDetailedRuleforResourcePoliciesonpage138
Copyright©2012,JuniperNetworks,Inc.
444
JunosPulseSecureAccessServiceAdministrationGuide
Documents you may be interested
Documents you may be interested