AG: How to authorize by IP or then credentials

[Anonymous_User]

djaquays;233130 Wrote:
>
> OR IF Role.[Current] = UserRole1
>
> }

Have you checked if the user receives the UserRole1 upon
authentication?

Cheers,
Edward


--
edmaa
------------------------------------------------------------------------
edmaa's Profile: https://forums.netiq.com/member.php?userid=1118
View this thread: https://forums.netiq.com/showthread.php?t=48316

[Anonymous_User]

edmaa;233150 Wrote:
> Have you checked if the user receives the UserRole1 upon
> authentication?
>
> Cheers,
> Edward
If I turn on an authentication method or login to another protected site
first, this all works testing with the same user in every instance.


--
djaquays
------------------------------------------------------------------------
djaquays's Profile: https://forums.netiq.com/member.php?userid=2530
View this thread: https://forums.netiq.com/showthread.php?t=48316

[Anonymous_User]

djaquays wrote:

>
> edmaa;233150 Wrote:
> > Have you checked if the user receives the UserRole1 upon
> > authentication?
> >
> > Cheers,
> > Edward
> If I turn on an authentication method or login to another protected
> site first, this all works testing with the same user in every
> instance.

Ok, in that case, i'm not sure anymore. I'm just going by what I see in
your log. In order to troubleshoot it better we probably need a browser
log (fiddler or httpwatch, not a free tool) in combination with the
catalina.out from the IDP and ESP and the apache error_log when in
debug mode.

--
Cheers,
Edward