Configuration Guides › Federation Security Services Guide › Configure SOA Security Manager as a SAML 2.0 Service Provider › SAML 2.0 Authentication Scheme Prerequisites › Set Up a Key Database to Sign and Verify SAML POST Responses

Set Up a Key Database to Sign and Verify SAML POST Responses

Set up a key database for each Policy Server that is responsible for signing assertions, verifying signatures or both.

SOA Security Manager can sign and verify HTTP-POST responses and sign AuthnRequest messages.

For HTTP-POST single sign-on, the Identity Provider uses its private key/certificate pair to sign the assertion response. The Service Provider then verifies that signature using the associated certificate (public key).

The Service Provider can sign an AuthnRequest message that it sends to the Identity Provider message authenticate a user for cross-domain single sign-on.