Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring Infranet Controller Sign-in Policies (NSM Procedure)

    Sign-in policies define the URLs that users and administrators use to access the Infranet Controller and the sign-in pages that they see. The Infranet Controller has two types of sign-in policies—one for administrators and one for users. When configuring sign-in policies, you associate realms, sign-in pages, and URLs.

    This topic contains the following information about sign-in policies:

    Configuring Administrator Sign-In Policies

    To define an administrator sign-in policies:

    1. In the NSM navigation tree, select Device Manager > Devices.
    2. Click the Device Tree tab, and then double-click the Infranet Controller device for which you want to define the administrator sign-in policies.
    3. Click the Configuration tab. In the configuration tree, select Authentication > Signing In > Sign-in Policies > User/Administrator URLs.
    4. Add or modify the settings for the User/Administrator URLs as specified in Table 1.
    5. Click one:
      • OK—Saves the changes.
      • Cancel—Cancels the modifications.

    Table 1: Administrator Sign–in Policies Configuration Details

    Option

    Function

    Your Action

    Sign-in URL

    Specifies the URL that you want to associate with the policy.

    Enter the URL. Use the format <host>/<path>, where <host> is the hostname of the Infranet Controller and <path> is any string you want users to enter. For example, enter:

    users1.yourcompany.com/ic.

    To specify multiple hosts, use the * wildcard character. To specify that all administrator URLs should use the sign-in page, enter */admin.

    Note: You may only use wildcard characters (*) in the beginning of the hostname portion of the URL. The Infranet Controller does not recognize wildcards in the URL path.

    Description

    Specifies the description for the policy.

    Enter a brief description for the administrator sign-in policy.

    Enable

    Enables the sign-in policy option.

    Select this option.

    Sign-in Page

    Specifies the page that you want to associate with the sign-in policy.

    Select the sign-in page.

    User Type

    Specifies the user type.

    Select Administrator, and click Add to move the required Admin Realms from the Non-members list to the Members list.

    Realm Select

    Specifies which realm(s) map to the policy, and how users and administrators should pick from among realms.

    • Select User types the realm name for the Infranet Controller to map the sign-in policy to all authentication realms, but do not provide a list of realms from which the administrator can choose. Instead, the administrator must manually enter the realm name into the sign-in page.
    • Select User picks from a list of authentication realms for the Infranet Controller to map only the sign-in policy to the authentication realms that you choose. The Infranet Controller presents this list of realms when the administrator signs-in to the Infranet Controller and allows a realm to be chosen from the list.

      Note: The Infranet Controller does not display a drop-down list of authentication realms if the URL is only mapped to one realm. Instead, only the realm you specify is displayed.

    Configuring User Sign-in Policies

    To define user sign-in policies:

    1. In the NSM navigation tree, select Device Manager > Devices.
    2. Click the Device Tree tab, and then double-click the Infranet Controller device for which you want to define the user sign-in policies.
    3. Click the Configuration tab. In the configuration tree, select Authentication > Signing In > Sign-in Policies > User/Administrator URLs.
    4. Add or modify the settings for the User/Administrator URLs as specified in Table 2.
    5. Click one:
      • OK—Saves the changes.
      • Cancel—Cancels the modifications.

    Table 2: User Sign–in Policies Configuration Details

    Option

    Function

    Your Action

    Sign-in URL

    Specifies the URL that you want to associate with the policy.

    Enter the URL.Use the format <host>/<path>, where <host> is the hostname of the Infranet Controller and <path> is any string you want users to enter. For example, enter:

    users1.yourcompany.com/ic.

    To specify multiple hosts, use the * wildcard character. To specify that all end–user URLs should use the sign-in page, enter */.

    Description

    Describes the user sign-in policies.

    Enter a brief description for the user sign-in policies.

    Enable

    Enables the sign-in policy option.

    Select this option.

    Sign-in Page

    Specifies the page that you want to associate with the sign–in policy.

    Select the default page that comes with the Infranet Controller, a variation of the standard sign-in page, or a custom page that you create using the customizable UI feature. For more information, see “Configuring Standard Sign-In Pages.”

    User Type

    Specifies the user type.

    Select User.

    authentication-realms

    Specifies the realm(s) that should be mapped to the sign-in policy.

    1. Click authentication-realms. The Authentication dialog box appears.
    2. Select the Realm and Authentication Protocol.
    3. Click OK.

    User may specify the realm name as a username suffix

    Allows non-UAC endpoints to access the Infranet Controller by entering their credentials in the format user@realm.

    Select this option.

    Remove realm suffix before passing to authentication server

    Allows users who enter their credentials with a suffix to send the user name without the suffix. Most authentication servers are not compatible with a realm suffix or decorated username.

    Select this option.

    Published: 2012-11-28