Lab 3.2 - Add HTTP Connector to the IAP Policy

Now that the HTTP Connector Request has been defined you will add it to basic-iap.acme.com application and test.

Task - Add the HTTP Connector Request

  1. From the web browser, click on the Access tab located on the left side.

    image12

  2. Click Guided Configuration

  3. Click IAP_DEMO

    image14

  4. Click on Contextual Access

    image15

  5. Click on basic-iap.acme.com

    image16

  6. Click Add under Trigger Rules

    image17

  7. Enter Name get-user-status

  8. Check HTTP Connector Request

  9. Select get-aduser-attributes from the HTTP Connector Request dropdown

  10. Under Value (Success Expression) enter expr {[mcget {subsession.http_connector.body.userAccountControl}] == 66048 }

  11. Select Step Up from the Match Action dropdown

  12. Select Custom Radius based Authentication (MFA) from the Step Up Authentication field

  13. Click Save

    image18

  14. Change the Match Action field for the Default Fallback rule to Reject

  15. Click Save

    image19

  16. Click Deploy. Deployment will take a few moments.

    image20