Configuration Guides › Federation Security Services Guide › Deploying Federation without the FSS Sample Application › Set Up the Identity Provider › Install the IdP Policy Server

Install the IdP Policy Server

Set up the Policy Server.

To install the Policy Server

1. Install a Policy Server.

   For instructions, see the SOA Security Manager Policy Server Installation Guide.

2. Select the web server that is used for the UI.

   In this deployment, an IIS Web Server is the server on which the Policy Server is installed. Your network can use a different supported web server.

3. Select a policy store.

   In this deployment, a Sun Java LDAP directory is serving as the policy store. The installation configures and initializes this policy store for you.

   Important! If you initialize a new policy store, the Policy Server installer automatically imports the affiliate objects contained in the ampolicy.smdif file. These objects are necessary for federation. If you use an existing policy store that you do not initialize, import the affiliate objects manually. To verify that the import is successful, log in to the FSS Administrative UI and click on Domains in the System tab. If the import is successful, you can see the FederationWebServices domain object.

4. (Optional) Enable Policy Server Trace Logging so you can use the log to troubleshoot your setup.
5. Point the Policy Server to the LDAP Policy Store.

More information:

Point the Policy Server to the IdP LDAP Policy Store

Enable Policy Server Trace Logging at the IdP