Cisco Systems Servers Server User Manual


 
12-21
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter 12 Administering External User Databases
Database Group Mappings
Step 8 Repeat Step 7 until the group mappings are in the order you need.
Step 9 Click Submit.
Result: The Group Mappings for database page displays the group set mappings
in the order you defined.
RADIUS-Based Group Specification
For some types of external user databases, Cisco Secure ACS supports the
assignment of users to specific Cisco Secure ACS groups based upon the
RADIUS authentication response from the external user database. This is
provided in addition to the unknown user group mapping described in the Group
Mapping by External User Database section on page 12-10. RADIUS-based
group specification overrides group mapping. The database types that support
RADIUS-based group specification are as follows:
LEAP Proxy RADIUS server
CRYPTOCard token server
ActivCard token server
Vasco token server
RADIUS token server
Cisco Secure ACS supports per-user group mapping for users authenticated with
a LEAP Proxy RADIUS Server database. This is provided in addition to the
default group mapping described in the Group Mapping by External User
Database section on page 12-10.