Creating an Identity Injection Policy for Basic Authentication

This section explains how to enable single sign-on by creating an Identity Injection policy that injects the user’s authentication credentials into a header. The web server uses the credentials in the authentication header to satisfy its login requirements.

  1. Click Devices > Access Gateways, then click Edit > DAL > Dallistener > Protected Resources.

  2. In the Protected Resource List, click sales_page.

  3. Click Identity Injection > Manage Policies > New.

  4. For the new policy, fill in the following fields:

    Name: Specify Basic_Auth for the name.

    Type: Select Access Gateway: Identity Injection for the type.

  5. Click OK.

  6. In the Actions section, click New, select Inject into Authentication Header, then select the following values:

    User Name: Select Credential Profile. The LDAP Credentials: LDAP User Name value is automatically selected for you. This credential is the cn attribute of the user.

    Password: Select Credential Profile. Click LDAP Credentials: LDAP User Name, then select LDAP Credentials > LDAP Password.

    Your policy must look similar to the following:

  7. Click OK to close the policy editing page, then click OK to close the Rule List page.

  8. In the Policy List page, click Apply Changes, then click Close.

  9. Select the Basic_Auth check box, click Enable, then click OK.

  10. Click OK to return to the Protected Resource List. Your list must look similar to the following:

  11. To save your configuration changes, click the Access Gateways link, then click Update > OK.

  12. To test the configuration:

    1. Open a new browser, then enter the URL of the Digital Airlines website you created.

      In this example, it is am3bc.provo.novell.com.

    2. Log in as Tom.

      The Digital Airlines site must appear with Sales System.

    3. Click Sales System. You must have access to the Sales System site, as shown below:

      For more information about Identity Injection policies, see Section 6.4, Identity Injection Policies.

    4. Close all sessions of the browser.