Federation Security Services Guide › Authenticate SAML 2.0 Users at the Service Provider › Supply SAML Attributes as HTTP Headers › Configure a Response to Send Attributes as HTTP Headers

Configure a Response to Send Attributes as HTTP Headers

You must configure a response that sends the SAML attributes as HTTP headers to the Web Agent. The Web Agent will process the response and make the header variables available to the client application.

To create a response to send the attributes as headers

1. Log on to the FSS Administrative UI.
2. From the Domains tab, select the domain that contains the target resource.
3. In the domain, select the Responses object and create a new response.

   The Response Properties dialog opens.

4. Click Create.

   The Response Attribute dialog opens.

5. Select WebAgent-HTTP-Header-Variable in the Attribute field.
6. Select Active Response in the Attribute Kind group box.
7. Complete the fields in the Attribute Fields group box as follows:
   • Variable Name

     Specify the name you want for the header variable. You assign this name.

   • Library Name

     smfedattrresponse

     This must be the entry for this field.

   • Function Name

     getAttributeValue

     This must be the entry for this field.

   • Parameters

     Specify the name of the attribute as it appears in the assertion.

     An agreement between you and your federated partner determines the attributes that will be in the assertion.

8. Click on OK to save the attribute.
9. Repeat the procedure for each attribute that should become an HTTP header variable. You can configure many attributes for a single response.

The response will send the attributes on to the Web Agent to become HTTP headers.