Chapter 33       Identity Server Security Service Attributes


The Identity Server Security Service Attributes are dynamic attributes. The values applied to these attributes are applied to either a role or an organization. If the role is assigned to a user or a user is assigned to the organization, these attributes, by default, are inherited by the user. The Identity Server Security Service Attributes are:

• Enrollment URL

• Inherited Country

  
  

  ---

  Note

  In order to enable the Identity Server Security Service, you must: Install Sun ONE Certificate Server 4.7 SP1. For installation instructions, see the Certificate Server 4.7 release notes at http://docs.sun.com/db/prod/s1certsrv#hic. Configure the Certificate Server to enable the Identity Server Security Service. For configuration instructions, see the Sun ONE Certificate Server Installation and Setup Guide at http://docs.sun.com/db/coll/S1_s1CertificateServer_47. Define the Identity Server Security Service attributes described in this chapter.

  ---

  
  

Enrollment URL

This attribute specifies the place holder for the value of the Sun One Certificate Server's enrollment service. The syntax is one of the following:

http://<hostname>:<non ssl end entity port number>/enrollment

https://<hostname>:<ssl end entity port number>/enrollment

The parameters are as follows:

hostname	The hostname of the server where Certificate Server is installed.
non ssl end entity port number	The non-SSL end entity port number, by default, is 80. It is configured after running Setup for Certificate Server.
ssl end entity port number	The SSL end entity port number, by default, is 443. It is configured after running Setup for Certificate Server.
enrollment	The enrollment servlet in Certificate Server.

Inherited Country

This attribute is a dynamic attribute in the schema that is used by an administrator to assign a country that can be used by all users.

The country value is used in generating the CSR (Certificate Signing Request) to be sent to the Certificate Server servlet in order to generate a certificate for the user.