Policy Server Guides › Policy Server Configuration Guide › Authentication Schemes › Information Card Authentication Schemes › Configure a Windows Authentication Scheme › How to Configure the Policy Server for ICAS › Create an Instance of ICAS

Create an Instance of ICAS

Create an instance of ICAS by specifying a custom authentication scheme in the Administrative UI.

Limit: Each policy store can support up to ten instances of ICAS.

To create an instance of ICAS

1. Click Infrastructure, Authentication, Authentication Scheme, Create Authentication Scheme.

   The Create Authentication Scheme search pane opens.

2. Select Create an object of type Authentication Scheme, and click OK.

   The Create Authentication Scheme: Name pane opens.

3. Type the authentication scheme's name and description in the fields on the General group box.
4. Select Custom Template from the drop-down list of Authentication Scheme Types on the Scheme Common Setup group box.

   The Scheme Setup group box replaces the Advanced group box.

5. Type a value in the Protection Level field on the Scheme Common Setup group box.
6. Clear the Password Policies check box on the Scheme Common Setup group box.

   Note: ICAS does not support Password Policies.

7. Type the following values in the fields on the Scheme Setup group box:

   Library

   smjavaapi

   Note: The custom authentication scheme uses the Java Authentication API.

   Secret and Confirm Secret

   Leave these fields blank.

   Note: The custom authentication scheme does not use the shared secret.

   Parameter

   Type the following two parameters in the Parameter field and separate them by a space:

   com.ca.sm.icas.SmAuthInfoCard

   This is the fully qualified name of the class that implements the SmAuthScheme interface.

   policy_server_home\config\icas\InfoCard.properties

   This is the location of the properties file.

   Example:

   com.ca.sm.icas.SmAuthInfoCard policy_server_home\config\icas\InfoCard.properties

8. Click Submit.

   The Create Authentication Scheme task is submitted for processing.