Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 262 / 374

262 Novell Access Manager 3.1 SP2 Identity Server Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
10.2 Using the ADFS Server as an Identity
Provider for an Access Manager Protected
Resource
The Active Directory Federation Services server can be configured to provide authentication for a
resource protected by Access Manager.
Figure 10-2
Using an ADFS Server for Access Manager Authentication
In this scenario, the following exchanges occur:
1. The user requests access to a resource protected by an Access Gateway.
2. The resource sends an authentication request to the Novell Identity Server.
3. The Identity Server is configured to trust an Active Directory Federation Services server and
gives the user the option of logging in at the Active Directory Federation Services server.
4. The user logs into the Active Directory Federation Services server and is provided a token
5. The token is sent to the Identity Server.
6. The token satisfies the authentication requirements of the resource, so the user is allowed to
access the resource.
The following sections describe how to configure this scenario.
 Section 10.2.1, “Configuring the Identity Server as a Service Provider,” on page 262

Section 10.2.2, “Configuring the ADFS Server to Be an Identity Provider,” on page 266
 Section 10.2.3, “Logging In,” on page 267

Section 10.2.4, “Additional WS Federation Configuration Options,” on page 267
10.2.1 Configuring the Identity Server as a Service Provider

“Prerequisites” on page 263
4
Browser ADFS
Server
Identity Server
Active Directory
Server
3
1
ADFS Server
6
5
2