The next stage is to create the authentication rules for use with the server definition.
Field
Description
Name
Add a suitable name for your authentication rule.
Description
Add a suitable description.
Root Domain
This must be left blank unless you need single-sign-on across sub-domains.
Authentication Server
This is a dropdown box containing servers that you have configured.
Client Authentication:
Choose the value appropriate to your needs:
Basic (401) – This method uses the standard 401 authentication method
Forms – this will present the ADC default form to the user. Within the form, you can add a message. You can select a form that you have uploaded using the section below.
Server Authentication
Choose the appropriate value.
None – if your server does not have any existing authentication, select this setting. This setting means that you can add authentication abilities to a server that previously had none.
Basic – if your server has basic authentication (401) enabled, then select BASIC.
NTLM – if your server has NTLM authentication enabled, then select NTLM.
Form
Choose the appropriate value
Default – Selecting this option will result in the ADC using its built-in form.
Custom – you can add a form that you have designed and select it here.
Message
Add a personal message to the form.
Timeout
Add a timeout to the rule, after which the user will be required to authenticate again. Note the Timeout setting is only valid for Forms-based authentication.
If you wish to provide a single sign-on for users, complete the Root Domain field with your domain. In this example, mycompany.com. We can now have multiple services that will use edgenexus.io as the root domain, and you will only have to log in once. If we consider the following services:
SharePoint.mycompany.com
usercentral.mycompany.com
App Store.mycompany.com
These services can reside on one VIP or can be distributed across 3 VIPs. A user accessing usercentral.mycompany.com for the first time will be presented with a form asking them to log in depending on the authentication rule used. The same user can then connect to App Store.mycompany.com and will be authenticated automatically by the ADC. You can set the timeout, which will force authentication once this period of inactivity has been reached.
