Management and Configuration Guide (Includes ACM xl) 2005-12

4-10 ProCurve Secure Access 700wl Series Management and Configuration Guide
Configuring Rights
Identity Profiles
Identity Profiles represent named groups of users or equipment that have some characteristic in
common—usually a common need for a certain set of access rights. An Identity Profile can be populated
with user or network equipment entries from the built-in database, or it can represent an external group
or domain. In the latter case, the Identity Profile does not need to have any specific Users or equipment
associated with it. Instead, when a client is authenticated, a group or domain name is returned as part
of the authentication process. If the returned group or domain information matches an Identity Profile
name, the client is considered to be matched to that Identity Profile.
» To view the current Identity Profiles, click the Identity Profiles tab visible at the top of any Rights
Manager page.
The Identity Profiles page appears (see Figure 4-3).
Figure 4-3. The Identity Profiles Page
The 700wl Series system provides three predefined Identity Profiles, and a Rights Administrator can
create additional ones. The predefined Identity Profiles can be considered default or implicit profiles, as
users will match them automatically based on certain criteria.
The predefined Identity Profiles are:
• Authenticated: clients that have been successfully authenticated automatically match this profile
• Guest: clients that log on through the Guest logon feature automatically match this profile (Guests
are not considered authenticated)
• Access Points: clients (identified by MAC address) that are actually Access Points
• Any: all clients automatically match this profile
These predefined profiles are typically used in rows at the bottom of the Rights Assignment Table, to
catch clients that do not match more specific Identity Profiles higher in the table. If you plan to use these
profiles in combination with other Identity Profiles you create, it is important that you order your rows
correctly so that the more specific Identity Profile will be evaluated first.
» To edit an Identity Profile, click the Identity Profile name in the first column of the table, or click the
pencil icon at the end of the row. You cannot edit the Authenticated or Any profile.
» To delete an Identity Profile, click the trash can icon at the end of the row. You cannot delete the
predefined Identity Profiles.