Using the Secure Attribute Exchange Sample

OpenSSO Enterprise includes a sample that can be run for testing your configurations. It is located in container_context_root/opensso/samples/saml2/sae. In the sample, auto-federation and transient name identifier, two features of SAML v2, are used. If there are no actual users on either the identity provider side or the service provider side, you need to use the following procedure to change the authentication framework to ignore user profiles for these two features to work correctly.

1. Login to OpenSSO Enterprise administration console as administrator.

   By default, this is amadmin.

2. Click the name of the realm you are modifying.

3. Click the Authentication tab.

4. Click Advanced Properties.

5. Select the Ignore Profile radio button under User Profile.

6. Click Save.

7. Log out of the console.