Junos OS supports the integrated ClearPass authentication and enforcement feature that includes the user role and enforcement function. For this feature, the device relies on Aruba ClearPass as its authentication source. With the user authentication information provided by ClearPass, you can configure security policies and allow device to enforce them based on user identity (source identity) rather than relying on the IP address of a user's device. You can also use group, or role, identities in security policies.