Your Juniper SE team can generate a 1, 2, 4 or 8 week pre-sales evaluation license key. Or you can purchase lab licenses for post-sales evaluation. You may also purchase ICE keys which provide full appliance capacity for 8 weeks, to be deployed when an emergency situation arises. ... View more

Here's the link (Secondary Authentication): http://www.juniper.net/techpubs/software/ive/admin/j-sa-sslvpn-7.2-adminguide.pdf ... View more

You coukd also try a policy trace to see which users gets which role and why. ... View more