Programming Guides › Programming Guide for Perl › Policy Management API › Authentication Scheme Configuration › Configuration Tables › SAML 2.0 Template

SAML 2.0 Template

This authentication scheme is based on the SAML 2.0 scheme type. It is configured by a SAML 2.0 Service Provider.

A Service Provider uses this authentication scheme to transparently validate a user based on the information in a SAML 2.0 assertion.

An authentication scheme based on the SAML 2.0 Template differs from other types of authentication schemes in two ways:

• SAML 2.0 authentication schemes are created with the method CreateSAMLAuthScheme(). This method creates a PolicyMgtAuthScheme object, just as CreateAuthScheme() does.
• SAML 2.0 authentication schemes have two sets of properties:
  • The properties listed in the table that follows. These properties are stored in the PolicyMgtAuthScheme object.

    Typically, the only properties in this set that you might choose to modify in an existing SAML 2.0 authentication scheme are name, description, and protection level. Modify these properties with the appropriate method in the PolicyMgtAuthScheme object.

  • Metadata properties for the associated Identity Provider. The associated Identity Provider is the Identity Provider that supplies the assertion to the Service Provider.

These properties are stored with the PolicyMgtAuthScheme object as a hashtable.

For information about the metadata properties you can assign to a SAML 2.0 authentication scheme, see the section SAML 2.0 Property Reference in the online Policy Management API Reference.

This authentication scheme requires SiteMinder Federation Security Services. The Federation Security Services feature is licensed separately. Where applicable, the method CreateSAMLAuthScheme() is referenced in place of CreateAuthScheme().