Agent Guides › SAML Affiliate Agent Guide › Parameter Descriptions for Agent Configuration › Set the Shared Secret and Affiliate Password

Set the Shared Secret and Affiliate Password

The SharedSecret and AffiliatePassword attributes in the AffiliateConfig.xml file cannot be modified directly in the file. You have to use the encryptkey utility to modify these values.

Important! The SAML Affiliate Agent is not compatible with the FIPS 140-2 encryption standards.

Change the SharedSecret and AffiliatePassword as follows:

• SharedSecret

  This value is set during the installation of the SAML Affiliate Agent. Use encryptkey to modify it. The shared secret can be between 1 and 255 characters with no embedded spaces. Note also that it is case-sensitive.

  To modify this value using encryptkey, use the following command syntax:

  encryptkey -path path_to_AffiliateConfig.xml -sharedSecret new_secret

• AffiliatePassword

  This value must be set after installation of the SAML Affiliate Agent. The administrator at the producer should provide the unencrypted password, and it must match at the consumer and producer sites.

  To modify this value using encryptkey, use the following command syntax:

  encryptkey -path path_to_AffiliateConfig.xml -affiliate AffiliateName -affiliatepassword new_password

The variables in the encrypt key commands are as follows:

path_to_AffiliateConfig.xml

Specifies the path, including the file name, of the configuration file. If any value in the path has spaces, the entire path must be enclosed by quotation marks. For example:

encryptkey -path "C:\Program Files\netegrity\affiliateagent\config\AffiliateConfig.xml" -sharedSecret nete

new_secret

Specifies the shared secret in clear text.

AffiliateName

Indicates the value entered for the AffiliateName attribute. This argument ensures that the password is changed for the correct consumer, especially if the AffiliateConfig.xml file has more than one PerAffiliateInfo section.

new_password

Specifies the password in clear text.

After running the encryptkey utility, the new secret or password is inserted into the AffiliateConfig.xml file.

Note: To see the all the arguments for use with encryptkey, open a command window and enter encryptkey followed by a carriage return.