Updated Date: 07/07/2026
About HTTP 401 Response
The HTTP 401 Response action sends an HTTP 401 Authorization Required Response page to capture HTTP Basic or Negotiate authentication.
Note: For a per-request policy subroutine, HTTP 401 Response supports HTTP Basic authentication only.
The HTTP 401 Response action provides up to three branches: Basic, Negotiate, and fallback. Typically, a basic type of authentication follows on the Basic branch and a Kerberos Auth action follows on the Negotiate branch.
An HTTP 401 Response action provides these configuration elements and options.
- Basic Auth Realm
- Specifies the authentication realm for use with Basic authentication.
- HTTP Auth Level
- Specifies the authentication required for the policy.
-
none - specifies no authentication.
-
basic - specifies Basic authentication only.
-
negotiate - specifies Kerberos authentication only.
Note: This option is not available for a per-request policy subroutine.
-
basic+negotiate - specifies either Basic or Kerberos authentication.
Note: This option is not available for a per-request policy subroutine.
-
The action provides customization options that specify the text to display on the screen.
- Language
- Specifies the language to use to customize this HTTP 401 response page. Selecting a language causes the content in the remaining fields display in the selected language.
Note: Languages on the list reflect those that are configured in the access profile.
- Logon Page Input Field #1
- Specifies the text to display on the logon page to prompt for input for the first field. When Language is set to en, this defaults to
Username. - Logon Page Input Field #2
- Specifies the text to display on the logon page to prompt for input for the second field. When Language is set to en, this defaults to
Password. - HTTP response message
- Specifies the text that appears when the user receives the 401 response, requesting authentication.