Configuration Guides › Policy Configuration Guide › Additional WS-Security Configuration Requirements › Configuration Requirements for Generating SAML Assertions › Configure SAML 2.0 Service Providers

Configure SAML 2.0 Service Providers

SAML Service Provider objects define parameters used by the SAML Assertion Generator to produce SAML 2.0 assertions for use in WS-Security SAML tokens.

Note: When you configure a service provider object for use by SOA Security Manager, you are not defining a service provider organization for which the assertion is intended. Assertions generated for SOA Security Manager can be sent to any web service protected by the WS-Security authentication scheme (or similarly capable third-party security application).

To configure SAML Service Provider objects, generally follow the associated procedures in the CA SiteMinder Federation Security Services Guide. However, because SOA Security Manager does not use the affiliate object to define a service provider organization, you do not need to specify all the options. Fields whose use is different for use by SOA Security Manager are described below.

• Name

  Specifies the name of the service provider object (must be unique across all affiliate domains). This name is referenced by WS-Security policy responses (by defining a txm_wssec_saml_affiliate attribute whose value matches the name of the affiliate object).

• Enabled

  Sets the Enabled check box to activate the service provider object. This option must be set for SOA Security Manager to produce SAML 2.0 assertions.

• Authentication URL

  Not used by SOA Security Manager. However, a valid value is required. CA recommends using "http:\\localhost\"

• Application URL

  Not used by SOA Security Manager.

• SSO Tab: Bindings

  Choose the HTTP-Post option.