Federation Security Services Guide › Configure SiteMinder as a SAML 1.x Producer › How To Configure SiteMinder to Act as a SAML 1.x Producer

How To Configure SiteMinder to Act as a SAML 1.x Producer

The producer requires information about the consumer to send s SAML response for a given request.

Note: The SAML 1.x consumer is named an affiliate in the FSS Administrative UI.

The following configuration tasks at the producer are required:

1. Associate the affiliate with an affiliate domain. The affiliate must have permission to access Federation Web Services at the Producer.
2. Provide general information about the affiliate.
3. Select the users for which the producer generates assertions.
4. Configure the assertions.
5. The session server, a component of the Policy Server, is enabled. For SAML artifact authentication, the session server is where assertions are stored before they are forwarded to the Federation Web Services application at the Consumer.

The following configuration tasks are optional:

• Configure session management when the SAML Affiliate Agent is acting as the consumer.
• Configure attributes for inclusion in the assertions.
• Set IP address restrictions to limit the addresses used to access the affiliate.
• Configure time restrictions for affiliate operation.
• Configure the Assertion Generator plug-in to customize the content of an assertion.

Tips:

• Certain parameter values at the Producer and Consumer are required to match for the configuration to work. A list of those parameters is in Configuration Settings that Must Use the Same Values.
• Verify that you are using the correct URLs for the Federation Web Services servlets. The URLs are listed in Federation Web Services URLs Used in SiteMinder Configuration.