Federation Security Services Guide › Configure SiteMinder as a SAML 2.0 Service Provider › How to Configure a SiteMinder Service Provider

How to Configure a SiteMinder Service Provider

Configuring SiteMinder as a Service Provider requires the following tasks:

1. Complete the SAML 2.0 authentication scheme prerequisites.
2. Select the authentication scheme type and name it.
3. Configure disambiguation to authenticate users.
4. Configure single sign-on.

Configure a SAML authentication scheme for each Identity Provider that is a federation partner and generates assertions. Bind each scheme to a realm. The realm consists of all the URLs of the target resources requested by users. Protect these resources with a SiteMinder policy.

Note: You can also associate the scheme with a realm using a single custom authentication scheme and single realm.

Tips:

• Certain parameter values at the Identity Provider and Service Provider must match for the configuration to work. A list of those parameters is available in Configuration Settings that Must Use the Same Values.
• Verify that you are using the correct URLs for the Federation Web Services servlets. The URLs are listed in Federation Web Services URLs Used in SiteMinder Configuration.