Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 15 / 374

Configuring an Identity Server
1
15
n
ov
do
cx (e
n)
16
Ap
ril 20
10
1
Configuring an Identity Server
After you log in to the Administration Console, click Devices > Identity Servers . The system
displays the Identity Servers that can be managed from this Administration Console.
A newly installed Identity Server is in an unconfigured state and is halted. It remains in this state and
cannot function until you create a cluster configuration and assign the Identity Server to the new
configuration. The cluster configuration defines how the Identity Server functions in an Access
Manager configuration. You can assign multiple servers to use the same configuration, which
enables failover and load balancing services.

Section 1.1, “Managing a Cluster Configuration,” on page 15
 Section 1.2, “Enabling Role-Based Access Control,” on page 27

Section 1.3, “Configuring Secure Communication on the Identity Server,” on page 27
 Section 1.4, “Security Considerations,” on page 32

Section 1.5, “Translating the Identity Server Configuration Port,” on page 36
 Section 1.6, “Using netHSM for the Signing Key Pair,” on page 41
For information on configuring local authentication options, see the following:
 Chapter 3, “Configuring Local Authentication,” on page 103

Chapter 4, “Configuring Advanced Local Authentication Procedures,” on page 139
 Chapter 6, “Defining Shared Settings,” on page 173

Chapter 13, “Configuring Liberty Web Services,” on page 291
1.1 Managing a Cluster Configuration
After you install an Identity Server, you must create a cluster configuration in order to configure the
Identity Server. Even if you have only one Identity Server, you must assign it to a cluster
configuration to configure it. If you have multiple Identity Servers, you can create multiple
configurations and assign different Identity Servers to them as shown in
Figure 1-1 .