To Create a New Circle of Trust

Follow this procedure to create a new circle of trust. The starting point is New Circle of Trust under the Federation interface.

1. Click New to display the circle of trust attributes.

   The New circle of trust profile page is displayed.

2. Type a name for the circle of trust.

3. Type a description of the circle of trust in the Description field.

4. Type a value for the IDFF Writer Service URL.

   The IDFF Writer Service URL specifies the location of the servlet that writes the common domain cookie. Use the format http://common-domain-host :port/deployment_uri/idffwriter.

5. Type a value for the IDFF Reader Service URL.

   The IDFF Reader Service URL specifies the location of the servlet that reads the common domain cookie. Use the format http://common-domain-host :port/deployment_uri/idffreader.

6. Type a value for the SAML2 Writer Service URL.

   This specifies the location of the SAML2 Writer service that writes the cookie to the common domain. Use the format http://common-domain-host :port/deployment_uri/saml2writer.

7. Type a value for the SAML2 Reader Service URL.

   This specifies the location of the SAML2 Reader service that reads the cookie from the common domain. Use the format http://common-domain-host :port/deployment_uri/saml2reader.

8. Choose Active or Inactive.

   The default status is Active. Choosing Inactive disables communication within the circle of trust.

9. Select the Realm in which the circle of trust will be created.

10. Choose one or more of the available providers and click the Add arrow to select them.

    The list provided contains the names of entities that have been created and populated with providers. For more information, see To Add Providers to a Circle of Trust.

11. Click OK to complete the configuration.

    The new circle of trust is displayed in the Circle of Trust list.