Previous Topic: How to Configure the Policy Server for ICASNext Topic: How to Configure the SiteMinder Key Database for ICAS


Configure an ICAS Properties File

An ICAS properties file specifies how an instance of ICAS behaves. When configuring an instance of ICAS in the Administrative UI, the administrator specifies the path to the associated properties file. To configure a new properties file, open a sample properties file with a text editor and edit the contents. Always save and rename the new properties file.

Note: Multiple instances of ICAS can share the same properties file.

Example: A properties file named InfoCard.properties contains the following properties and sample values:

fcc

Specifies the location of the fcc file.

Example: fcc=https://web_server_home/siteminderagent/forms/InfoCard.fcc

Note: To activate the Identity Selector, specify "https".

vppid_claim

Specifies the claim to use to disambiguate the user.

Examples:

vppid_claim=http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname

vppid_claim=http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname

vppid_claim=http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

alias

Specifies the key in the SiteMinder key store that is used to retrieve the Relying Party's SSL certificate.

Example: alias=rpssl

tokenPrim

Specifies the provider of the tokenPrim interface.

Example: tokenPrim=com.ca.sm.authscheme.infocard.higgins.TokenAdapter

Store Claims for Later Use in Active Responses

You can store claims for later use in active responses. To store claims for later use, add the following property to the properties file:

postprocessingchain

Defines the chain of commands to execute during user authentication. This phase includes any claim transformation and storage commands.

Example: postprocessingchain=com.ca.sm.authscheme.infocard.command.StoreClaimsToContext

More information:

Configure an Active Response that Retrieves a Claim Value