topic AuthZ Policy using specific Endpoint Identity Groups in Network Access Control

AuthZ Policy using specific Endpoint Identity Groups

cjkaufman@dmgov.org — Mon, 11 Mar 2019 05:27:11 GMT

I am trying to create an AuthZ policy that will identify if a device is in specific Endpoint Identity Group. See policy below.

I used the IdentityGroup:Name attribute Equals the Identity Group MAB_Devices. Please note that there are NO Identity groups listed in the dropdown options, so I typed in the name. Alas, the rule is not working. Anyone have advise on what I am doing wrong? Thx

You can choose the Endpoint

jj27 — Fri, 13 Feb 2015 21:09:57 GMT

You can choose the Endpoint Identity Group on the Authorization Policy before you specify any conditions. Will that meet your requirements?

Where it says If [Any] and [Conditions] when you create a new rule.

Bransomar, your screenshot is

Peter Koltl — Sun, 15 Feb 2015 17:26:55 GMT

Bransomar, your screenshot is an Authentication policy rule but you should do it in Authorization policy. Authentication policy sorts out requests by request method and origin and assigns an identity store to each.

Yes, thank you. That worked!

cjkaufman@dmgov.org — Mon, 16 Feb 2015 22:41:08 GMT

Yes, thank you. That worked!