Grant Access to the Service for Assertion Retrieval (Artifact SSO)

For HTTP-Artifact single sign-on, the relying party needs permission to access the policy that protects the FWS service for obtaining assertions.

To grant access:

Add the Web Agent that protects the FWS application to the agent group FederationWebServicesAgentGroup.
Add relying partners as users who are permitted to access the specific service.
Other than adding users to a given policy, all other policy objects are set up automatically.