kevinmsrs

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2019-01-07
22:23
564 views
Policy to applied group
Current test Setup:
- 1 Contract with two risk based methods
- "1st" risk policy checks IP address, if internal IP, use Kerberos, and allow access if passed. if External IP use Form based login then moves to 2nd risk policy if passed.
- "2nd" risk policy request 2nd factor via the Advanced Authentication plugin. If passed, the allow login.
I have a policy that states if Authentication Method "[Current]" equals "1st" method and not equal to "2nd" method, then Active Role "internal".
Then I try logging in both externally and internally, the "internal" role activates.
Whats the best way to to apply roles so that only users coming from internal IPs get a role activated.
- 1 Contract with two risk based methods
- "1st" risk policy checks IP address, if internal IP, use Kerberos, and allow access if passed. if External IP use Form based login then moves to 2nd risk policy if passed.
- "2nd" risk policy request 2nd factor via the Advanced Authentication plugin. If passed, the allow login.
I have a policy that states if Authentication Method "[Current]" equals "1st" method and not equal to "2nd" method, then Active Role "internal".
Then I try logging in both externally and internally, the "internal" role activates.
Whats the best way to to apply roles so that only users coming from internal IPs get a role activated.
1 Reply
AutomaticReply

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2019-01-14
05:30
kevinmsrs,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
These forums are peer-to-peer, best effort, volunteer run and that if your issue
is urgent or not getting a response, you might try one of the following options:
- Visit https://www.microfocus.com/support-and-services and search the knowledgebase and/or check
all the other self support options and support programs available.
- Open a service request: https://www.microfocus.com/support
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.microfocus.com)
- You might consider hiring a local partner to assist you.
https://www.partnernetprogram.com/partnerfinder/find.html
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.microfocus.com/faq.php
Sometimes this automatic posting will alert someone that can respond.
If this is a reply to a duplicate posting or otherwise posted in error, please
ignore and accept our apologies and rest assured we will issue a stern reprimand
to our posting bot.
Good luck!
Your Micro Focus Forums Team
http://forums.microfocus.com
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
These forums are peer-to-peer, best effort, volunteer run and that if your issue
is urgent or not getting a response, you might try one of the following options:
- Visit https://www.microfocus.com/support-and-services and search the knowledgebase and/or check
all the other self support options and support programs available.
- Open a service request: https://www.microfocus.com/support
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.microfocus.com)
- You might consider hiring a local partner to assist you.
https://www.partnernetprogram.com/partnerfinder/find.html
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.microfocus.com/faq.php
Sometimes this automatic posting will alert someone that can respond.
If this is a reply to a duplicate posting or otherwise posted in error, please
ignore and accept our apologies and rest assured we will issue a stern reprimand
to our posting bot.
Good luck!
Your Micro Focus Forums Team
http://forums.microfocus.com