- Book Information
- Index
- Preface
- Chapter 1 Introducing Federation Manager
- Chapter 2 Installing and Deploying Federation Manager
- Preparing for Installation
- Installation Sequence
- The Silent Installation File
- Federation Manager Installation Options
- Deploying Your Federation Manager WAR
- Accessing the Federation Manager Console
- Installation Tools Reference
- Chapter 3 Customizing Federation Manager
- General Customizations
- Using an LDAPv3–compliant Directory
- Changing the Default Data Store for Configuration Data to an LDAPv3–compliant Directory
- Changing the Default Data Store for User Data to an LDAPv3–compliant Directory
- The serverconfig.xml File
- Configuring Federation Manager for Sun Java System Policy Agents
- Chapter 4 Getting Started
- Chapter 5 System Administration
- Organization Properties
- Console Properties
- System Properties
- Logging
- Maximum Log Size
- Number of History Files
- Log File Location
- Logging Type
- Database User Name
- Database User Password
- Database User Password (confirm)
- Database Driver Name
- Configurable Log Fields
- Maximum Number of Records
- Number of Files per Archive
- Buffer Size
- DB Failure Memory Buffer Size
- Buffer Time
- Enable Time Buffering
- Naming
- Profile Service URL
- Session Service URL
- Logging Service URL
- Policy Service URL
- Authentication Service URL
- SAML Web Profile/Artifact Service URL
- SAML SOAP Service URL
- SAML Web Profile/POST Service URL
- SAML Assertion Manager Service URL
- Federation Assertion Manager Service URL
- Security Token Manager URL
- JAXRPC Endpoint URL
- Platform
- Session
- Logging
- Chapter 6 Authentication
- Customizing Authentication
- Default Authentication Services
- Access Control
- Core
- Pluggable Authentication Module Classes
- Supported Authentication Module for Clients
- LDAP Connection Pool Size
- Default LDAP Connection Pool Size
- Administrator Authentication Configuration
- User Profile Dynamic Creation Default Roles
- Enable Persistent Cookie Mode
- Persistent Cookie Maximum Time
- Alias Search Attribute Name
- Default Authentication Locale
- Organization Authentication Configuration
- Enable Login Failure Lockout Mode
- Login Failure Lockout Count
- Login Failure Lockout Interval
- Email Address to Send Lockout Notification
- Warn User After N Failures
- Login Failure Lockout Duration
- Lockout Attribute Name
- Lockout Attribute Value
- Default Success URL
- Default Failure Login URL
- Authentication Post Processing Class
- Enable Generate UserID Mode
- Pluggable User Name Generator Class
- Default Authentication Level
- Flat File
- SAML
- Additional Authentication Services
- Active Directory
- Primary Active Directory Server
- Secondary Active Directory Server
- DN To Start User Search
- DN for Root User Bind
- Password for Root User Bind
- Password for Root User Bind (confirm)
- Attribute Used to Retrieve User Profile
- Attributes Used to Search for a User to be Authenticated
- User Search Filter
- Search Scope
- Enable SSL Access To Active Directory Server
- Return User DN to Authenticate
- Active Directory Server Check Interval
- User Creation Attributes
- Authentication Level
- Anonymous
- Certificate
- Match Certificate in LDAP
- Subject DN Attribute Used to Search LDAP for Certificates
- Match Certificate to CRL
- Issuer DN Attribute Used to Search LDAP for CRLs
- HTTP Parameters for CRL Update
- Enable OCSP Validation
- LDAP Server Where Certificates are Stored
- LDAP Start Search DN
- LDAP Server Principal User
- LDAP Server Principal Password
- LDAP Server Principal Password (confirm)
- LDAP Attribute for Profile ID
- Use SSL for LDAP Access
- Certificate Field Used to Access User Profile
- Other Certificate Field Used to Access User Profile
- Trusted Remote Hosts
- SSL Port Number
- Authentication Level
- HTTP Basic
- JDBC
- LDAP
- Primary LDAP Server
- Secondary LDAP Server
- DN to Start User Search
- DN for Root User Bind
- Password for Root User Bind
- Password for Root User Bind (confirm)
- Attribute Used to Retrieve User Profile
- Attributes Used to Search for a User to be Authenticated
- User Search Filter
- Search Scope
- Enable SSL to Access LDAP Server
- Return User DN to Authenticate
- LDAP Server Check Interval
- User Creation Attribute List
- Authentication Level
- Membership
- Minimum Password Length
- Default User Roles
- User Status After Registration
- Primary LDAP Server
- Secondary LDAP Server
- DN to Start User Search
- DN for Root User Bind
- Password for Root User Bind
- Password for Root User Bind (confirm)
- Attribute Used to Retrieve User Profile
- Attributes Used to Search for a User to be Authenticated
- User Search Filter
- Search Scope
- Enable SSL to Access LDAP Server
- Return User DN to Authenticate
- Authentication Level
- MSISDN
- Trusted Gateway IP Address
- MSISDN Number Argument
- LDAP Server and Port
- LDAP Start Search DN
- Attribute To Use To Search LDAP
- LDAP Server Principal User
- LDAP Server Principal Password
- LDAP Server Principal Password (confirm)
- Enable SSL for LDAP Access
- LDAP Attribute Used to Retrieve User Profile
- Return User DN on Authentication
- Authentication Level
- RADIUS
- SafeWord
- SecurID
- Windows Desktop SSO
- Windows NT
- Active Directory
- Chapter 7 Federation, Authentication Domains and
Entities
- Entities: Provider and Affiliate
- To Create a New Provider Entity or Affiliate Entity
- To Modify the General Attributes of a Provider Entity or an Affiliate Entity
- To Add an Identity Provider to a Provider Entity
- To Add a New Hosted Identity Provider to a Provider Entity
- To Add a New Remote Identity Provider to a Provider Entity
- To Add a Service Provider to a Provider Entity
- To Add a New Hosted Service Provider to a Provider Entity
- To Add a New Remote Service Provider to a Provider Entity
- To Modify Hosted Identity Provider Attributes in a Provider Entity
- To Modify Remote Identity Provider Attributes in a Provider Entity
- To Modify Hosted Service Provider Attributes in a Provider Entity
- To Modify Remote Service Provider Attributes in a Provider Entity
- To Add a Contact Person to a Provider in a Provider Entity
- To Modify a Contact Person Profile in a Provider Entity
- To Create the Affiliation in an Affiliate Entity
- Authentication Domains
- Auto-Federation
- Bulk Federation
- Entities: Provider and Affiliate
- Chapter 8 SAML Administration
- Chapter 9 Web Services
- Liberty Personal Profile Service
- ResourceID Mapper
- Authorizer
- Attribute Mapper
- Provider ID
- Name Scheme
- Namespace Prefix
- Supported Containers
- PPLDAP Attribute Map List
- Require Query PolicyEval
- Require Modify PolicyEval
- Extension Container Attributes
- Extension Attributes Namespace Prefix
- Is ServiceUpdate Enabled
- Service Instance Update Class
- Alternate Endpoint
- Alternate Security Mechanisms
- Discovery Service
- Provider ID
- Supported Authentication Mechanisms
- Supported Directives
- Enable Policy Evaluation for DiscoveryLookup
- Enable Policy Evaluation for DiscoveryUpdate
- Authorizer Plugin Class
- Entry Handler Plugin Class
- Classes for ResourceID Mapper Plugin
- Authenticate Response Message
- Generate Session Context Statement for Bootstrapping
- Encrypt NameIdentifier in Session Context for Bootstrapping
- Use Implied Resource; don't generate ResourceID for Bootstrapping
- Resource Offerings for Bootstrapping
- SOAP Binding Service
- Authentication Web Service (Authentication Service)
- Creating a New Web Service
- Liberty Personal Profile Service