SAML-based user authentication in Juniper Secure Connect

Juniper Secure Connect remote access VPN supports user authentication using Security Assertion Markup Language (SAML) version 2. To perform the remote user authentication using SAML, run the VPN service using the iked process on your firewall and ensure you have the SAML-supported Juniper Secure Connect application.

Configure SAML service provider and identity provider settings at the [edit access saml] hierarchy level. Enable SAML settings in the access profile configuration using the set access profile profile-name authentication-order saml command.