About Mumford_

Mumford_ · ‎09-10-2013

We have SAML configured now (with Google and Box.net, and some others) using RSA auth. Is it possible to configure it such that if the user is coming from our internal network (easily distinguished by RFC1918 addresses), that they will use LDAP auth instead, but still use RSA if coming from external? Users balk at the idea of having to use their RSA fobs when in the office at their desk, and I agree.

Mumford_ · ‎09-10-2013

This actually works well. The Realm chooser appears when the user is connecting internally, but we can just direct the user to ignore that. The problem now is the login page itself. Since the login page is chosen based on the URL, not on the REALM, I can't configure it to say "RSA PIN" in place of Password when the realm is RSA.

Configure SAML to use different auth method depend...

Re: Configure SAML to use different auth method de...