Federation Security Services Guide › Deploying Federation without the FSS Sample Application › Add Functionality to the Federation Deployment › Configure Digital Signing (required for POST Binding) › Enable Signature Validation at the SP

Enable Signature Validation at the SP

To validate a digital signature for POST single sign-on

1. Log into the FSS Administrative UI.
2. From the System tab, select Authentication Schemes to display the Authentication Scheme List.

   Select the existing SAML 2.0 authentication scheme, Partner IdP.demo Auth Scheme

   The Authentication Scheme Properties dialog box opens.

3. In the Scheme Common Setup group box, uncheck the Disable Signature Processing check box. Unchecking this box enables signature processing.
4. In the D-Sig Info box, enter the following:
   • Issuer DN

     CN=Certificate Manager,OU=IAM,O=CA.COM

   • Serial Number

     008D 8B6A D18C 46D8 5B

   The D-Sig information enables the Service Provider to verify the SAML response signature. The values for the Issuer DN and Serial Number are from the public key in the Service Provider's smkeydatabase.

5. Click OK.

   Validation configuration is now complete.

6. Test POST single sign-on.