Lab 2.6 - Contextual Access
------------------------------------------------

In this section you will configure Contextual Access for the previously created Application Groups


Task - Configure Contextual Access for adauth_header Group
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#. Click **Contextual Access** from the ribbon

   |image21|

#. Click **Add**

   |image22|

#. Enter Name **ad-header-iap.acme.com**
#. Select **Application Group** from the Resource Type dropdown
#. Select **adauth_header-iap.acme.com** from the Resource dropdown
#. Select **ad** from the Primary Authentication dropdown
#. Select **header_sso** from the HTTP_Header dropdown
#. Click **Save**

   |image23|

Task - Configure Contextual Access for ocspauth_header Group
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#. Click **Add**

   |image24|

#. Enter Name **ocsp-header-iap.acme.com**
#. Select **Application Group** from the Resource Type dropdown
#. Select **ocspauth_header-iap.acme.com** from the Resource dropdown
#. Select **ad** from the Primary Authentication dropdown
#. Select **header_sso** from the HTTP_Header dropdown
#. Check **Enable Additional Checks**

   |image25|

#. Click **Add** to add a Trigger Rule

   |image26|

#. Enter Name **ad-webadmin-group-check**
#. Check **User Group Check**
#. Locate the **Website Admin** group 

.. tip:: Try using the filter field to search

#. Click **Add** under the Action column

   |image28|

#. Select **Step Up** from the Match Action dropdown
#. Select **ocsp** from the Step Up Authentication dropdown
#. Click **Save**
#. Click **Save** again to save the Contextual Access Properties for ocsp-header-iap.acme.com

   |image29|

#. Click **Deploy** located under the ribbon. Deployment will take a few moments.

   |image27|


.. |image21| image:: /_static/class1/module2/image021.png
.. |image22| image:: /_static/class1/module2/image022.png
.. |image23| image:: /_static/class1/module2/image023.png
.. |image24| image:: /_static/class1/module2/image024.png
.. |image25| image:: /_static/class1/module2/image025.png
.. |image26| image:: /_static/class1/module2/image026.png
.. |image27| image:: /_static/class1/module2/image027.png
.. |image28| image:: /_static/class1/module2/image028.png
.. |image29| image:: /_static/class1/module2/image029.png