Federation › Federation Security Services Guide › Use an Attribute Authority to Authorize Users › Set up a SAML Requestor to Generate Attribute Queries

Previous Topic: Configure the Back Channel for the Attribute Authority

Next Topic: Enable Attribute Queries and Specify Attributes

Set up a SAML Requestor to Generate Attribute Queries

For a Service Provider to act as a SAML Requester, you need to configure a SAML 2.0 authentication scheme so that an attribute query can be generated.

To configure the Service Provider as a SAML Requester:

  1. Log on to the Policy Server User Interface.
  2. Display the Authentication Schemes object and double-click an existing SAML 2.0 authentication scheme or create a new scheme.

    The Authentication Scheme Properties dialog opens.

  3. Click Additional Configuration.

    The SAML 2.0 Auth Scheme Properties dialog opens.

  4. From this dialog you will configure fields in the following dialogs:
  5. Finally, you will configure a Federation Attribute Variable.

More Information:

Enable Attribute Queries and Specify Attributes

Configure the NameID for the Attribute Query

Configure the Backchannel for the Attribute Query

Create a Federation Attribute Variable