aam authentication logon http-authenticate instance

HTTP-authenticate Logon

This object allows you to configure and define basic HTTP and NTLM client authentication methods.

instance Specification

Type Collection
Object Key(s) name
Collection Name instance-list
Collection URI /axapi/v3/aam/authentication/logon/http-authenticate/instance/
Element Name instance
Element URI /axapi/v3/aam/authentication/logon/http-authenticate/instance/{name}
Element Attributes instance_attributes
Statistics Data URI /axapi/v3/aam/authentication/logon/http-authenticate/instance/{name}/stats
Schema instance schema

Operations Allowed:

Operation Method URI Payload

Create Object

POST

/axapi/v3/aam/authentication/logon/http-authenticate/instance/

instance Attributes

Create List

POST

/axapi/v3/aam/authentication/logon/http-authenticate/instance/

instance Attributes

Get Object

GET

/axapi/v3/aam/authentication/logon/http-authenticate/instance/{name}

instance Attributes

Get List

GET

/axapi/v3/aam/authentication/logon/http-authenticate/instance/

instance-list

Modify Object

POST

/axapi/v3/aam/authentication/logon/http-authenticate/instance/{name}

instance Attributes

Replace Object

PUT

/axapi/v3/aam/authentication/logon/http-authenticate/instance/{name}

instance Attributes

Replace List

PUT

/axapi/v3/aam/authentication/logon/http-authenticate/instance/

instance-list

Delete Object

DELETE

/axapi/v3/aam/authentication/logon/http-authenticate/instance/{name}

instance Attributes

Get Stats

GET

/axapi/v3/aam/authentication/logon/http-authenticate/instance/{name}/stats

stats data

instance-list

instance-list is JSON List of instance Attributes

instance-list : [

instance Attributes

auth-method

Description: auth-method is a JSON Block . Please see below for auth-method

Type: Object

name

Description: Specify a name for the HTTP-Authenticate logon profile.

Type: string

Required: Yes

retry

Description: Specify maximum number times ACOS will resend the authentication request to the client, to allow the end-user to re-enter their credentials.

Type: number

Range: 1-32

Default: 3

sampling-enable

Description: sampling-enable is a JSON List . Please see below for sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘spn_krb_request’: SPN Kerberos Request; ‘spn_krb_success’: SPN Kerberos Success; ‘spn_krb_faiure’: SPN Kerberos Failure;

Type: string

Supported Values: all, spn_krb_request, spn_krb_success, spn_krb_faiure

auth-method

Specification
Type object

basic

Description: basic is a JSON Block . Please see below for l1053_basic

Type: Object

negotiate

Description: negotiate is a JSON Block . Please see below for l1053_negotiate

Type: Object

ntlm

Description: ntlm is a JSON Block . Please see below for l1053_ntlm

Type: Object

auth-method.ntlm

Specification
Type object

ntlm-enable

Description: Enable NTLM as the method for a set logon profile.

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

auth-method.negotiate

Specification
Type object

negotiate-enable

Description: Enable SPENGO protocol as a method of validating logon. This protocol negotiates with the server to find out what authorization mechanism is implemented and continues the rest of the authentication accordingly.

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

auth-method.basic

Specification
Type object

basic-enable

Description: Enable basic authentication as a method for a configured logon profile.

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

basic-realm

Description: Designate the realm in which shared credentials are used for authentication.

Type: string

Format: string-rlx

challenge-response-form

Description: Specify access challenge response form which gives you an additional request information form to be configured.

Type: string

new-pin-page

Description: Specify new PIN page as a secondary form of authentication in a RSA-RADIUS profile.

Type: string

Format: string-rlx

new-pin-variable

Description: Specify a new name of the data field for the new pin entered into the New Pin page.

Type: string

Format: string-rlx

next-token-page

Description: Specify Next-Token page as a secondary form of authentication in a RSA-RADIUS profile.

Type: string

Format: string-rlx

next-token-variable

Description: Specify a next-token name of the data field for the Next-Token page.

Type: string

Format: string-rlx

stats data

Counter Size Description
spn_krb_success 8 SPN Kerberos Success
spn_krb_request 8 SPN Kerberos Request
spn_krb_faiure 8 SPN Kerberos Failure