Federation Security Services Guide › Deploying Federation with the FSS Sample Application › Modify the FederationSample.conf File › FederationSample.conf Settings

FederationSample.conf Settings

You must configure all the settings in the FederationSample.conf file at an FSS site.

The settings are as follows:

• USER_DIRECTORY

  Specifies the name of an existing user directory object specified in the FSS Administrative UI. This directory must contain at least one user entry. If no value is specified for this setting, the sample application script reads the user directory information from the policy store, provided there is only one user directory listed. If more than one user directory is listed, the sample application script asks the user to enter the user directory name in this file. There is no default value.

• USER_ATTRIBUTE

  Indicates that the value of this attribute becomes the Name Identifier value in the SAML assertion. If no value is specified for this setting, the sample application script chooses a value based on the user directory type. Example of attribute values can include:

  • LDAP: uid or mail
  • ODBC: name or email

  If no value is specified, the following defaults are used:

  • For LDAP: uid
  • For ODBC: name
  • For ActiveDirectory: cn
• AGENT_NAME

  Defines the name of the DefaultAgentName configuration setting for the Web Agent. This setting is specified in the Agent Configuration Object of the Policy Serve User Interface. If no value is specified for this setting, the sample application script reads the DefaultAgentName from the policy store, provided only one Agent configuration object found in the policy store. If more than one Agent configuration object exists, the sample application prompts the user to enter the DefaultAgentName value in this file.

• WEB_SERVER_DOC_ROOT

  Specifies the full path to the web server's document root directory. The default value is C:\Inetpub\wwwroot, the root directory for an IIS Web server. For example, if you are using a Sun Java System web server, the path would be server_root/docs .

• WEB_SERVER_PORT

  Specifies the Web server's listening port. The default port is 80.

• PARTNER_WEB_SERVER_PORT

  Specifies the listening port of the web server on the opposite side of the federation connection. For example, if your site is the IdP, then this is the SP's web server port. The default port is 80.