Security

Dear Experts 

 

Please refer to attached snap. Can someone shed some light as to why we select/enable a particular field as Role and/or Attribute. What is the meaning of Role / Attribute here?

 

 

When role is ticked it's mapped directly to a ClearPass role. An attribute would need role mapping to achieve the same result.

In your example if role is ticked, when a user authenticates, their department would become one of their clearpass roles.

Dear JR, 

 

Just to understand, when you said "In your example if role is ticked, when a user authenticates, their department would become one of their clearpass roles", do you mean that this role will become one of the assigned roles? like [user authenticated]?

Yes, that's correct.

Oh nice, let me check and share my feedback

very nice !

When you enable it as role, you will see departement value as a role in your authentcation, you can use it directly in enforcement profile.