Configuration Guides › Federation Security Services Guide › Deploying Federation with the FSS Sample Application › Deploy the Sample Application on One System
Deploy the Sample Application on One System
To deploy the sample application, run the SetupFederationSample.pl script from a command line.
The script accomplishes the following:
- Reads the configuration information from FederationSample.conf file.
- Creates policy objects in the policy store to establish the SAML 2.0 single sign-on and single logout profiles.
- Copies web pages to the web server document root
- Adds a private key and the corresponding certificate data to smkeydatabase.
- Modifies the hosts file of the system to map a loopback IP address, 127.0.0.1 to www.sp.demo and www.idp.demo
After the SetupFederationSample.pl script is run once, running it again deletes the sample policy objects created by the previous execution of the script.
Important! Use the Perl interpreter that is shipped with SOA Security Manager. This script is located in the directory policy_server_home/CLI/bin.
To run the sample application on a single system
- Complete all core SOA Security Manager and federation prerequisites.
- (Optional) If you are using a web browser on a system that does not have the correct host mappings for www.idp.demo and www.sp.demo, add these mappings to the hosts file of the system.
- Windows
-
The host file is typically located in WINDOWS\system32\drivers\etc\hosts.
- UNIX
-
The host file is commonly located in /etc/hosts.
- Configure the FederationSample.conf file.
- Open up a command window.
- Navigate to policy_server_home/siteminder/samples/federation.
- Run the SetupFederationSample.pl script then follow the prompts:
perl SetupFederationSample.pl -admin siteminder_administrator
-password administrator_password
Note: When you are prompted to continue with the installation, enter the word "yes." Do not only enter the letter "y."
You can review the list of script command options.
- Restart the Policy Server after the script is finished.
- Test single sign-on and single logout.