Federation › Federation Security Services Guide › Configure SiteMinder as a SAML 2.0 Service Provider › How To Protect Resources with a SAML 2.0 Authentication Scheme › Assign a SAML 2.0 Authentication Scheme to a Realm › Configure a Custom Authentication Scheme for the Single Realm

Configure a Custom Authentication Scheme for the Single Realm

To create a custom authentication scheme for a single realm

1. Log into the Policy Server User Interface.
2. From the menu bar, select Edit, System Configuration, Create Authentication Scheme.

   The Authentication Scheme Properties dialog box opens.

3. From the Authentication Scheme Type drop-down list, select Custom Template. The contents of the dialog box change for the custom template.
4. In the Library field, enter smauthsinglefed for the library name. This is the library name for the custom single authentication scheme.
5. Disregard the Secret and Confirm Secret fields.

   In the Parameter field, which instructs the custom scheme which SAML authentication schemes it should use, specify one of the following options:

   • SCHEMESET=LIST; <saml-scheme1>;<saml_scheme2>

     Specifies the list of SAML authentication scheme names to use. If you configured an artifact scheme called artifact_Idp1 and POST profile scheme called samlpost_IdP2, you will enter these schemes.

   • SCHEMESET=SAML_ALL;

     Specifies all the schemes you have configured. The custom authentication scheme will enumerate all the SAML authentication schemes and find the one with the correct Provider Source ID for the request.

   • SCHEMESET=SAML_POST;

     Specifies all the SAML POST Profile schemes you have configured. The custom authentication scheme will enumerate the POST Profile schemes and find the one with the correct Provider Source ID for the request.

   • SCHEMESET=SAML_ART;

     Specifies all the SAML artifact schemes you have configured. The custom authentication scheme will enumerate the artifact schemes and find the one with the correct Provider Source ID for the request.

6. Disregard the Enable this scheme for SiteMinder Administrators checkbox.
7. Click OK to save your changes.