Configuration Guides › Policy Configuration Guide › Additional WS-Security Configuration Requirements › Configuration Requirements for Generating SAML Assertions › SAML 1.x Assertion Generator

SAML 1.x Assertion Generator

If you are configuring SOA Security Manager to add WS-Security tokens containing SAML 1.x assertions to SOAP documents for consumption by other web services, you must configure the SAML Assertion Generator to produce the SAML 1.1 assertions that will be used in those tokens.

Note: The SAML Assertion Generator is a component of CA SiteMinder Federation Security Services on the Policy Server. For more information, see the CA SiteMinder Federation Security Services Guide.

The SAML Assertion Generator uses static configuration data from two sources to determine how to construct assertions:

• SAML Assertion Generator Properties File

  Specifies domain-wide SAML assertion generation parameters

• Affiliate Objects

  Define a set of parameters for the SAML Assertion Generator

Once configured, the SAML Assertion Generator is triggered to generate an assertion when a WS-Security SAML response (which specifies the affiliate to use to generate the assertion and dynamic information about how the assertion and message should be signed) is triggered by an authorizing policy.