How To: Restrict Which Groups Can See a Realm in Secure Portal

Version Affected: All

 

Overview

Secure Portal can be configured so that a realm is only shown to members of specific groups, hiding it from everyone else. There are two ways to set up the group restriction itself, and one additional step both methods need — without it, the realm can remain visible to everyone on the Secure Portal page even though the restriction is correctly configured.

In this article

• Method 1: Group Permissions on the realm's Data tab
• Method 2: The UserGroups key in the realm's web.config
• Required either way: Set Portal Page Authorization to Token Required

Method 1: Group Permissions on the realm's Data tab

Use this method to restrict a realm's visibility from the Admin Console UI.

1. Open the Data tab of the realm you want to restrict.
2. Under Membership Connection Settings, open Group Permissions.
3. Set User Group Check Type to Allow Access.
4. Enter the groups allowed to see this realm in User Groups. Anyone not in one of these groups will not see the realm on the Secure Portal page.

5. Save.

This only works with Allow Access, not Deny Access — with Deny Access, the realm can still deny login to users outside the allowed groups, but it will keep showing on the Secure Portal page for everyone regardless.

Method 2: The UserGroups key in the realm's web.config

Use this method to restrict a realm's visibility by editing its web.config directly, instead of through the Data tab UI.

1. Open the Admin Console and go to the System Info tab of the realm you want to restrict.
2. Scroll to the bottom and click to edit the web.config.
3. Search for the line starting <add key="UserGroups".
4. Change the line to <add key="UserGroups" value="GROUPNAME" />, replacing GROUPNAME with the group allowed to see this realm. For example:

5. Save.

Required either way: Set Portal Page Authorization to Token Required

Neither method above fully hides the realm from Secure Portal on its own. Without this additional step, the realm can still appear on the Secure Portal page for users outside the allowed group(s), even though they can't actually log in to it.

1. In the Admin Console, select the Secure Portal realm, then open its Post Authentication tab.

2. Click View and Configure the portal page to open the Portal Page Builder.
3. Set Portal Page Authorization to Token Required.

4. Click Save.

Once this is set, the realm should only be visible to members of the groups specified in Method 1 or Method 2.

Setting Token Required on Portal Page Authorization is equivalent to setting <add key="PortalTokenRequired" value="1" /> in the Secure Portal realm's web.config.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.