Policy Server Guides › Policy Design Guide › Authentication Scheme and Related Dialogs Reference › Authentication Scheme Dialog › Authentication Scheme Dialog—Custom Template for Federation › Authentication Scheme Dialog—Custom Template for Federation —Scheme Setup Tab

Authentication Scheme Dialog—Custom Template for Federation —Scheme Setup Tab

The Scheme Setup tab for a custom template is where you name the library to be used by the custom authentication scheme.

Library field

Specifies the library name for the custom single authentication scheme. Enter smauthsinglefed for the library name.

Secret field and Confirm Secret field

Disregard these fields.

Parameter field

Specifies which SAML (1.x or 2.0) or WS-Federation authentication schemes SiteMinder should use for federation. The custom authentication scheme chooses the correct SAML or WS-Federation authentication scheme  based on the entity that issues the assertion. The entity is identified by a query parameter it adds to the assertion and then passes to the entity where the target resource resides.

Note: For SAML 1.x, each SAML authentication scheme associated with the custom authentication scheme must be configured with a unique Issuer (SAML 1.x artifact) or Source ID (SAML 1.1 POST). If the same Issuer/Source ID value is used by more than one scheme and the SCHEMESET is set to SAML_ALL, SAML_POST, or SAML_ARTIFACT, Federation Security Services does not know which SAML 1.x authentication scheme in the list to use.

Specify one of the following options:

SCHEMESET=LIST; <saml-scheme1>;<saml_scheme2>

Specifies the list of SAML authentication scheme names to use. If you configured an artifact scheme called artifact_Idp1 and POST profile scheme called samlpost_IdP2, you will enter these schemes.

SCHEMESET=SAML_ALL;

Specifies all the schemes you have configured. The custom authentication scheme will enumerate all the SAML authentication schemes and find the one with the correct Provider Source ID for the request.

SCHEMESET=SAML_POST;

Specifies all the SAML POST Profile schemes you have configured. The custom authentication scheme will enumerate the POST Profile schemes and find the one with the correct Provider Source ID for the request.

SCHEMESET=SAML_ART;

Specifies all the SAML artifact schemes you have configured. The custom authentication scheme will enumerate the artifact schemes and find the one with the correct Provider Source ID for the request.

Enable this scheme for SiteMinder Administrators

Disregard this check box.