Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 155 / 374

Configuring Advanced Local Authentication Procedures 155
n
ov
do
cx (e
n)
16
Ap
ril 20
10
2 Specify a Display name (for example,
Contract-NMAS-NESCM-UserStore1
).
3
Enter a URI (for example,
nescm/test/uri
).
The URI is used to identify this contract for external providers and is a unique path value that
you create.
4 In the Available methods list, select the method created in “Creating a Method to Use the
NMAS Class” on page 153 , then click the left-arrow to move this method into the Methods list.
All other fields can remain in the default state.
5 (Conditional) If you want the user’s credentials (username and password) to be available for
Identity Injection policies, add the password fetch method as a second method for the contract.
For more information about this method and class, see
Section 4.5, “Configuring Password
Retrieval,” on page 148 .
6
Click Next , then configure a card for the contract by filling in the following fields:
ID: (Optional) Specify an alphanumeric value that identifies the card. If you need to reference
this card outside of the Administration Console, you need to specify a value here. If you do not
assign a value, the Identity Server creates one for its internal use.
Text: Specify the text that is displayed on the card to the user, for example Smart Card.
Image: Select the image to display on the card. You can select the NMAS Biometrics image or
you can select the Select local image option and upload an image that your users can associate
with using this smart card authentication contract.
Show Card: Determine whether the card is shown to the user, which allows the user to select
and use the card for authentication. If this option is not selected, the card is only used when a
service provider makes a request for the card.
7
Click Finish , then click OK .
8 Update the Identity Server.
9
Update the Access Gateway.
10 Continue with Section 4.6.4, “Assigning the NESCM Contract to a Protected Resource,” on
page 156