Previous Topic: Step 3: Upgrade the 4.x QMR 5/6 Web Agent to 6.x QMR 6

Next Topic: Step 6: Protect Federation Web Services

Step 4: Define Affiliate Domains at the Policy Server

At the producer, transfer the 4.51/4.61 affiliate information into 6.x affiliate policy objects for the Policy Server using the Policy Server User Interface.

When you import 4.51/4.61 affiliates into the 6.x policy store, they appear as a policy domain. You should see a 4.51/4.61 Affiliate Agent policy domain object in the System tab of the Policy Server User Interface.

In the 6.x affiliate model, an affiliate is not associated with a policy domain—it must be associated with an affiliate domain, so you need to create a new affiliate domain for each 4.51/4.61 policy domain.

Note: If you had multiple affiliates within multiple 4.51/4.61 policy domains, you may want to create multiple affiliate domains that correspond to each policy domain.

In the Policy Server User Interface:

  1. Create a new affiliate domain.
  2. Enter the relevant 4.51/4.61 information in the appropriate fields in the affiliate domain properties, as shown in the following table.

    Note: For step-by-step instructions on creating affiliate domains, see the Federation Security Services Guide.

4.51/4.61 Affiliate Property

Sample Value

Where to Set Value in the 6.x Policy Server User Interface

Affiliate Name

testagent

Create a domain and enter the following:

Name: testagent

Description: Affiliate Agent in test environment.

Select Affiliate Domain radio button.

Description

Affiliate Agent in test environment

User Directories

userdir-test1

In the Domain Properties for the affiliate domain:

Select the User Directories tab and add the userdir-test1 directory.

Administrators

SiteMinder

In the Domain Properties for the affiliate domain:

Select the Administrators tab and ensure SiteMinder is added.