I am looking to add Symantec VIP as part of the authentication flow for accessing the server iManager. I know there would be many ways around this if a person has access to port 524. It looks easiest to just do a Apache authentication before going to the standard iManager login, but didn't know if others had a different approach that they had used. We don't use NetIQ Access Manager, but do have a SAML2 environment.