HP Identity Driven Manager Software Series - Manual (Page 52)

Using Identity Driven Manager
Configuring Access Profiles
N O T E : If you set a VLAN in the Access Profile that is applied to a user during the
authentication process, that VLAN will take precedence over "auth-vid" or
"unauth-vid" settings on the switch. If the user is rejected by IDM for any
reason, and if you have an "unauth-vid" set, the port will be opened and the
VLAN will be set to the "unauth-vid."
Modifying an Access Profile
To modify an existing Access Profile:
1. Click the "Show Access Profiles" icon on the Global toolbar to display the
Access Profiles window.
2. Click on an Access Profile in the list to select it.
3. Click the "Modify Access Profile" icon in the toolbar to display the Modify
Access Profile window. The Modify window shows the details of the
Access Profile, similar to the Create a new Access Profile window.
4. Modify the access profile parameters, as described in Table on page 3-13.
5. Click
Ok
to save your changes and close the window
The changes are displayed in the Access Profiles list.
N O T E : When modifying Access Profiles, make sure the appropriate VLANs are con-
figured on the network and at the switch. If you Modify the VLAN attribute in
an Access Profile that is currently used in an Access Policy Group rule, IDM
will check that the VLAN exists. If not, an error message is displayed.
Deleting an Access Profile
To remove an existing Access Profile:
1. Click the "Show Access Profiles" icon on the Global toolbar to display the
Access Profiles window.
2. Click on an Access Profile in the list to select it.
3. Click on the "Delete Access Profile" icon in the toolbar to remove it.
The first time you use the Delete option, a warning pop-up is displayed.
Click
Ok to continue, or Cancel to stop the delete process.
N O T E : If you modify or delete an Access Profile, make sure that your changes do not
adversely affect users in Access Policy Groups where the profile is used.
3-14