This article explains what needs to be done to configure the HTTP method to connect to Juniper Identity Management Service (JIMS) in Query mode.

By default, SRX devices use the HTTPS method to connect to the JIMS server in Query mode. However, at times, the HTTP method is required in order to capture traffic between an SRX device and JIMS.

An example configuration to enable the HTTP method for JIMS in Query mode is as follows:

root@SRX1# run show services user-identification authentication-source aruba-clearpass
authentication-entry-timeout 240;
user-query {
    web-server {
        jims;
        connect-method http;    
        address 192.168.100.86;
        port 8082;
    }
    client-id SRX1;
    client-secret "$ABC123"; ## SECRET-DATA
    token-api oauth_token/oauth;
    query-api "user_query/v1/ip/$IP$";
    delay-query-time 30;
}

root@SRX1# run show services user-identification authentication-source aruba-clearpass user-query status    
Authentication source: aruba-clearpass

    Web server Address: 192.168.100.86
    Status: Online                
    Current connections: 0

2020-02-27: minor non-technical edits.