- Book Information
- Index
- Preface
- Part I The Liberty Alliance Project Specifications and Access Manager
- Chapter 1 Introduction to the Liberty Alliance Project
- Overview of the Liberty Alliance Project
- Concept of Identity
- Concept of Federation
- Concept of Trust
- Liberty Alliance Project Terms
- Account Federation
- Affiliation
- Attribute Provider
- Authentication Context
- Authentication Domain
- Binding
- Circle of Trust
- Client
- Common Domain
- Defederation
- Federation
- Federation Cookie
- Federated Identity
- Federation Termination
- Identity
- Identity Federation
- Identity Provider
- Identity Service
- Liberty-Enabled Client
- Liberty-Enabled Proxy
- Name Identifier
- Principal
- Profile
- Protocol
- Provider Federation
- Pseudonym
- Receiver
- Resource Offering
- Sender
- Server
- Service Provider
- Single Logout
- Single Sign-On
- Trusted Provider
- Web Service Consumer
- Web Service Provider
- Liberty Alliance Project Specifications
- Liberty Identity Federation Framework
- Liberty Identity Web Services Framework
- Liberty Identity Service Interface Specifications
- Schema Files and Service Definition Documents
- Support Documents
- Chapter 2 Implementation of the Liberty Alliance Project Specifications
- Chapter 1 Introduction to the Liberty Alliance Project
- Part II Federation Management
- Chapter 3 Federation
- Process of Federation
- Federation Graphical User Interface
- Entities and Authentication Domains
- The Pre-login URL
- Federation API
- Liberty ID-FF Operations
- Sample Federation Environment
- Chapter 4 Common Domain Services for Federation Management
- Chapter 3 Federation
- Part III Supported Web Services
- Chapter 5 Liberty Alliance Project Web Services Framework
- Chapter 6 Authentication Web Service
- Chapter 7 Data Services
- Data Services Overview
- Liberty Personal Profile Service
- Liberty Personal Profile Service Process
- Liberty Personal Profile Service Attributes
- ResourceID Mapper
- Authorizer
- Attribute Mapper
- Provider ID
- Name Scheme
- Namespace Prefix
- Supported Containers
- PPLDAP Attribute Map List
- Require Query PolicyEval
- Require Modify PolicyEval
- Extension Container Attributes
- Extension Attributes Namespace Prefix
- Service Update
- Service Instance Update Class
- Alternate Endpoint
- Alternate Security Mechanisms
- Access the Liberty Personal Profile Service
- Liberty Employee Profile Service
- Data Services Template API
- Developing A New Data Service
- Chapter 8 Discovery Service
- Discovery Service Overview
- Discovery Service Process
- Discovery Service Attributes
- Provider ID
- Supported Authentication Mechanisms
- Supported Directives
- Policy Evaluation for Discovery Lookup
- Policy Evaluation for Discovery Update
- Authorizer Plug-in Class
- Entry Handler Plug-in Class
- Classes For ResourceIDMapper Plug-in
- Authenticate Response Message
- SessionContextStatement for Bootstrapping
- Encrypt NameIdentifier in Session Context for Bootstrapping
- Implied Resource
- Resource Offerings for Bootstrapping
- Storing Resource Offerings
- Generating Security Tokens
- Discovery Service APIs
- Access the Discovery Service
- Discovery Service Sample
- Chapter 9 SOAP Binding Service
- Part IV SAML Administration and Application Programming Interfaces
- Chapter 10 SAML Administration
- SAML Overview
- Elements of SAML
- SAML Attributes
- SAML API
- SAML Operations
- SAML Samples
- Chapter 11 Application Programming Interfaces
- Chapter 10 SAML Administration
- Appendix A Liberty-based and SAML Samples
- Appendix B Key Management