Previous Topic: X.509 Client Cert or Basic Template

Next Topic: X.509 Client Cert Template

X.509 Client Cert or Form Template

Use this table when configuring an authentication scheme based on the scheme type X.509 Client Certificate or Form. The Java methods referenced in the table are in the class SmScheme.

Information Type

Value Assignment and Meaning

Scheme type

setType(TypeX509ClientCertOrForm)

The scheme type X.509 Client Certificate or HTML Form.

Description

setDescription(description)

The description of the authentication scheme.

Protection level

setLevel(value)

A value of 1 through 1000. The higher the number, the greater degree of protection provided by the scheme. Default is 5.

Library

setLibrary("smauthcertorform")

The default library for this scheme type.

Parameter

setParameter(param)

A string containing the following information:

  • Server for establishing an SSL connection. This server redirects a user’s X.509 certificate over an SSL connection.
  • Name and path of the SSL and forms credentials collector (SFCC).

If you are using an alternate forms-based authentication over SSL, also provide the following two pieces of information:

  • The fully qualified name of the SSL server used for establishing an SSL connection for authentication.
  • Name and path of the Forms Credentials Collector (FCC).

https://SSLserver:port/SFCC?certorform;
   [https://BasicServer/FCC]

 

The following example uses the default SCC values:

https://my.SSLserver.com:80/siteminderagent/
   certoptional/forms/login.sfcc?certorform;
   https://my.BasicServer.com/
   siteminderagent/forms/login.fcc

 

Shared secret

setSecret("")

Set to an empty string. Not applicable to this scheme.

Is template?

setIsTemplate(0)

Set to 0 to indicate that the scheme is not a template, or 1 if the scheme is a template. Default is 0.

Is used by administrator?

setIsUsedByAdmin(0)

Set to 0—scheme is not used to authenticate administrators.

Save credentials?

setAllowSaveCreds(0)

Set to 0 to indicate that user credentials won’t be saved.

Is RADIUS?

setIsRadius(0)

Set to 0—scheme is not used with RADIUS agents.

Ignore password check?

setIgnorePwCheck(flag)

Set to 1 to ignore password checking, or 0 to check passwords. Default is 0.