Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 250 / 374

250 Novell Access Manager 3.1 SP2 Identity Server Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
All the methods that you have defined for the Identity Server appear in the Available methods
list, but the only default method that works is the Secure Name/Password-Form method. It has
been extended so that it knows how to extract name and password information from a managed
card that is not backed by a personal card. You can use the Secure Name/Password-Form class
to create additional methods for specific user stores.
You can also create a custom method, if required. For information, see
Novell Access Manager
Developer Tools and Examples (http://developer.novell.com/wiki/index.php/
Novell_Access_Manager_Developer_Tools_and_Examples)
.
3 Click OK , then update the Identity Server if you have changed the configuration.
9.3 Configuring the Authentication Request
Use the Authentication Request page to select the format for the name identifier that is returned in
the SAML assertion. The selected attribute sets (
Identity Servers > Edit > STS > Attribute Sets )
determine the values that are available for the formats. If you select a format but do not specify a
value, a unique value is generated.
1
In the Administration Console, click Devices > Identity Servers > Edit > STS > Authentication
Request .
2 Select one of the following:
None: Indicates that the SAML assertion does not contain a name identifier.
Unspecified: Specifies that the SAML assertion contains an unspecified name identifier. For
the value, select the attribute that the relying party and the identity provider have agreed to use.
E-mail: Specifies that the SAML assertion contains the user’s e-mail address for the name
identifier. For the value, select an e-mail attribute.
X509: Specifies that the SAML assertion contains an X.509 certificate for the name identifier.
For the value, select an X.509 attribute.
3 Click OK , then update the Identity Server if you have changed the configuration.