Federation Security Services Guide › Authenticate SAML 2.0 Users at the Service Provider › Customize Assertion Processing with the Message Consumer Plug-in › Configuring the Message Consumer Plug-in (SAML 2.0)

Configuring the Message Consumer Plug-in (SAML 2.0)

To configure the message consumer plug-in

1. From the Authentication Scheme Properties dialog box, click Additional Configuration.

   The SAML 2.0 Auth Scheme Properties dialog box opens.

2. Select the Advanced tab.
3. Implement the plug-in class.

   A sample class, MessageConsumerSAML20.java, can be found in sdk/samples/authextensionsaml20.

4. In the Full Java Class Name field, enter the Java class name of the plug-in. This plug-in is invoked by the Message Consumer at run time.

   The plug-in class can parse and modify the assertion, and then return the result to the Message Consumer for final processing.

   Only one plug-in is allowed for each authentication scheme. For example, com.mycompany.messageconsumer.SampleCode

   A sample plug-in is included in the SDK. You can view a sample message consumer plug-in at sdk/samples/authextensionsaml20.

   Note: Specify a Message Consumer plug-in for each authentication scheme.