Programming Guides › Programming Guide for Perl › Policy Management API › Authentication Scheme Configuration › Configuration Tables › WS-Federation Template

WS-Federation Template

This authentication scheme is based on the WS-Federation scheme type. It is configured by a WS-Federation Resource Partner.

A Resource Partner uses this authentication scheme to validate a user transparently based on the information in a SAML 1.1 assertion.

An authentication scheme based on the WS-Federation Template differs from other types of authentication schemes in two ways:

• WS-Federation authentication schemes are created with the method CreateWSFEDAuthScheme(). This method creates a PolicyMgtAuthScheme object, just as CreateAuthScheme() does.
• WS-Federation authentication schemes have two sets of properties:
  • The properties listed in the table that follows. These properties are stored in the PolicyMgtAuthScheme object.

    Typically, the only properties in this set that you might choose to modify in an existing WS-Federation authentication scheme are name, description, and protection level. Modify these properties with the appropriate method in the PolicyMgtAuthScheme object.

  • Metadata properties for the associated Account Partner. The associated Account Partner is the one that supplies the assertion to the Resource Partner.

These properties are stored with the PolicyMgtAuthScheme object as a hashtable.

Note: For information about the metadata properties you can assign to a WS-Federation authentication scheme, see the section WS-Federation Property Reference in the online Policy Management API Reference.

This authentication scheme requires SiteMinder Federation Security Services. The Federation Security Services feature is licensed separately.