Federation Security Services Guide › Deploying Federation without the FSS Sample Application › Add Functionality to the Federation Deployment › Configure SAML 2.0 Artifact Single Sign-on › Set Up the IdP Session Server for Artifact Single Sign-on

Set Up the IdP Session Server for Artifact Single Sign-on

For artifact binding, you need to set-up and enable the session server at the IdP. When you use the artifact binding, the session server is required to store the assertion prior to it being retrieved with the artifact.

Note: An ODBC database must be used as the session store.

To enable the session server

1. Install and configure an ODBC database to serve as the session store. In this deployment, we are using Microsoft SQL Server.

   For instructions, see the Policy Server Installation Guide.

2. Open the Policy Server Management Console.
3. Select the Data tab.
4. Choose Session Server From the Database drop-down list.
5. Complete the following fields:
   • Data Source Information

     SiteMinder Session Data Source

   • User Name

     admin

   • Password

     dbpassword

   • Confirm Password

     dbpassword

   • Maximum connections

     16 (default)

6. Select the Enable Session Server check box.
7. Click OK to save the settings.
8. Enable SSL for the IdP Web Server for Artifact Single Sign-on.