AMConfig.properties

AMConfig.properties is the main configuration file for Access Manager and Federation Manager. AMConfig.properties is located in the /etc/opt/product-directory/config directory in Access Manager and the /staging-directory/web-src/WEB-INF/classes directory in Federation Manager.

Static Properties in AMConfig.properties

This list describes the properties added to AMConfig.properties when the SAML v2 Plug-in for Federation Services is installed.

Do not modify the properties configured during installation.

• com.sun.identity.saml2.am_or_fm takes a value of AM for Access Manager or FM for Federation Manager. It specifies the instance type onto which the SAML v2 Plug-in for Federation Services is installed.

• com.sun.identity.saml2.xmlenc.EncProviderImpl=com.sun.identity.saml2.xmlenc.FMEncProvider specifies the XML encryption provider implementation class.

• com.sun.identity.saml2.xmlenc.SigProviderImpl=com.sun.identity.saml2.xmlsig.FMSigProvider specifies the XML signature provider implementation class.

• com.sun.identity.common.datastore.provider.default=com.sun.identity.saml2.plugins.IdRepoDataStoreProvider specifies the data store provider implementation class. The IdRepoDataStoreProviderdefault class provides implementation using the identity repository API.

  ---

  Note –

  In Federation Manager, a different implementation class is already set. It is not set by the SAML v2 Plug-in for Federation Services installer.

  ---

• The com.sun.identity.saml2.nameidinfo.attribute and com.sun.identity.saml2.nameidinfokey properties specify the LDAPv3 attribute to which you want federation information written in a principal's account. For more information, see Using Non-Default Federation Attributes.

Additional Properties in AMConfig.properties

This list describes the properties and accompanying values that may be added to AMConfig.properties after installation.

• com.sun.identity.saml2.cacheCleanUpInterval takes a value in seconds. It specifies the amount of time between each cache cleanup.

• com.sun.identity.saml2.sdk.mapping.interface-name=new-class-name is a mapping property for customized implementation classes. For more information, see The SAML v2 Plug-in for Federation Services SDK.