Federation Security Services Guide › Authenticate WS-Federation Users at a Resource Partner › Customize Assertion Processing with the Message Consumer Plug-in › Integrate the Message Consumer Plug-in with SiteMinder (WS-Federation)

Integrate the Message Consumer Plug-in with SiteMinder (WS-Federation)

In addition to configuring a message consumer plug-in, you have to integrate the plug-in with the WS-Federation authentication scheme.

The instructions for compiling the message consumer plug-in Java file are in the AssertionSample.java file, in sdk/samples/authextensionsaml20.

To integrate the Message Consumer plug-in with the authentication scheme

1. Compile the message consumer plug-in Java file.

   The Java file requires the following .jar file installed with the Policy Server:

   <policy_server_home>/bin/java/SmJavaApi.jar

2. In the JVMOptions.txt file, modify the -Djava.class.path value so it is set to the classpath for the plug-in. This enables the plug-in to be loaded.

   Note: Do not modify the classpath for SMJavaApi.jar.

3. Restart the Policy Server.

   Restarting ensures that the latest version of the message consumer plug-in is picked up after being recompiled.

Note: Instead of specifying the message consumer plug-in class and its parameters via the FSS Administrative UI you can use the Policy Management API (C or Perl). For instructions, see the SiteMinder Programming Guide for C or the SiteMinder Programming Guide for Java.

Additional information about the Message Consumer plug-in can be found as follows:

• Reference information (method signatures, parameters, return values, data types), and also the new constructor for UserContext class, are in the Java Developer's Reference. Refer to the MessageConsumerPlugin interface.
• Overview and conceptual information about authentication and authorization APIs, see the SiteMinder Programming Guide for Java.