Portals Configuration | 159Adding or Editing a Domain with NT Domain AuthenticationTo configure a domain with NT Domain authentication, perform the following steps:Step 1 On the Portals > Domains page, click Add Domain or the Configure icon for the domain to edit.The Add Domain or Edit Domain window is displayed.Step 2 If adding the domain, select NT Domain from the Authentication Type menu. The NT Domainconfiguration fields will be displayed.Step 3 If adding the domain, enter a descriptive name for the authentication domain in the DomainName field. This is the domain name selected by users when they authenticate to the SRAappliance portal. It may be the same value as the NT Domain Name.Step 4 Enter the IP address or host and domain name of the server in the NT Server Address field.Step 5 Enter the NT authentication domain in the NT Domain Name field. This is the domain nameconfigured on the Windows authentication server for network authentication.Step 6 Enter the name of the layout in the Portal Name field. Additional layouts may be defined in thePortals > Portals page.Step 7 Optionally select the Enable client certificate enforcement check box to require the use ofclient certificates for login. By checking this box, you require the client to present a clientcertificate for strong mutual authentication. Two additional fields will appear:• Verify user name matches Common Name (CN) of client certificate - Select this checkbox to require that the user’s account name match their client certificate.• Verify partial DN in subject - Use the following variables to configure a partial DN that willmatch the client certificate:– User name: %USERNAME%– Domain name: %USERDOMAIN%– Active Directory user name: %ADUSERNAME%– Wildcard: %WILDCARD%Step 8 Select the Delete external user accounts on logout check box to delete users who are notlogged into a domain account after they log out.
