Federation Security Services Guide › Identify Consumers at a SAML 1.x Producer › Configure SAML 1.x Assertions to Authenticate Users › Configuring a SAML 1.x Assertion

Configuring a SAML 1.x Assertion

The Assertions tab lets you define how assertions are sent to the consumer. The assertion is used to authentication the user at the consumer site.

To configure a SAML 1.x assertion

1. Log into the FSS Administrative UI.
2. Click on the Domains tab and select the affiliate domain.
3. Select Affiliates to display the list of consumers, and double-click the consumer you want to configure.

   The Affiliate Properties dialog box opens.

4. Click the Assertions tab.
5. Complete the following fields.

   Note: You can click Help for a description of fields, controls, and their respective requirements.

   • SAML Profile
   • Assertion Consumer URL (required for SAML POST; optional for SAML Artifact)

     For details and required URL syntax for this field, click Help.

     Note: For SAML 1.x artifact binding, a value specified for the Assertion Consumer URL takes precedence over the value of the SMCONSUMERURL query parameter, which is a required query parameter of the intersite transfer URL that a user selects to initiate single sign-on. If you are concerned that the SMCONSUMERURL could be manipulated to send the user to an unauthorized site where the artifact is retrieved, we recommend specifying a value for the Assertion Consumer URL.

   • Validity Duration Seconds
   • Skew Time Seconds
6. Optionally, fill in the Audience field.
7. Optionally, for artifact profile, check the Sign Assertion box.
8. Click OK to save your changes.