Multiple authentication profiles for GP portal and gateway?

[RahmanDuran]

Hi,

I am using LDAP authentication profile for GP Portal and Gateway authentication. The problem is when the LDAP server is down I can not log in. So I want to use two authentication profiles. One for LDAP backend and one for local authentication. As you see in the attached screenshot, I added them to GP portal settings. The problem is I can not use two of them. LDAP backed account is "test@domain.com". Local account is "test-local". If the LDAP profile is on top in Portal settings, LDAP authentication works and I can login with "test@domain.com". But if I try to login with "test-local" it fails with error log:

"failed authentication for user 'test-local'. Reason: User is not in allowlist auth profile 'LDAP-Admin-Users', vsys 'vsys1', From: xxx.xxx.xxx.xxx.

As you can see it tries to authenticate local user against LDAP profile and fails. It does not try to authenticate it against local profile.

So why can we set multiple authenticatin profiles in GP Portal settings? What is the purpose of it if it only uses first one? Or how can I achive what I need?

Thanks,

Rahman

[RahmanDuran · Accepted solution]

Well, after digging the documentation I think I found what I want; "Auhtentication sequence". So with creating authentication sequence that includes both local and ldap profiles then using this sequence in GP Portal, I solved my problem. I still don't understand the purpose of adding multiple profiles directly to Portal settings btw.

Thanks,

Rahman 

[Deepak_K]

In addition to distinguishing a client authentication configuration by an OS, you can further differentiate by specifying an authentication profile. (You can create a New Authentication Profile or select an existing one.) To configure multiple authentication options for an OS, you can create multiple client authentication profiles.

authentication sequence profile which you have tried is the proper solution for your requirement.

Multiple authentication profile we use to create multiple authentication profile with different OS type.