Previous Topic: Create an Instance of ICASNext Topic: MS Passport Authentication Schemes

Policy Server Guides › Policy Server Configuration Guide › Authentication Schemes › Information Card Authentication Schemes › Configure a Windows Authentication Scheme › How to Configure the Policy Server for ICAS › Configure an Active Response that Retrieves a Claim Value

Configure an Active Response that Retrieves a Claim Value

You can use the custom class com.ca.sm.icas.GetClaimValue to configure an active response that retrieves a claim value after authentication is complete.

Note: Storing and retrieving claim values requires a session server. For more information about session servers, see the Policy Server Administration Guide.

To configure an active response that retrieves a claim value

  1. Click Policies, Domains, Response, Create Response.

    The Create Response: Select Domain pane opens.

  2. Select a domain, and click Next.

    The Create Response: Define Response pane opens.

  3. Type the name and a description of the response in the fields on the General group box.
  4. Specify Web Agent as the Agent Type on the Attributes group box.
  5. Click Create Response Attribute on the Attribute List group box.

    The Create Response Attribute: Name pane opens.

  6. Select WebAgent-HTTP-Header-Variable or WebAgent-HTTP-Cookie-Variable from the drop-down list of attributes on the Attribute Type group box.
  7. Select Active Response as the Attribute Kind on the Attribute Setup group box.
  8. Type the following values in the Attribute Fields on the Attribute Setup group box.
    Cookie or Variable Name

    Specifies the name of the claim.

    Example: emailaddress

    Library Name

    Specifies the name of the library.

    Value: smjavaapi

    Function Name

    Specifies the name of the function.

    Value: JavaActiveExpression

    Parameters

    Specifies the custom ICAS command and the location of the file, claims.xsd, that defines standard claim types according to the Information Card model.

    Example: com.ca.sm.authscheme.infocard.GetClaimValue http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

  9. Click OK.

    The Create Response task is submitted for processing.

More information:

Configure an ICAS Properties File

Store Claims for Later Use in Active Responses