Configuring An Identity Server; Managing A Cluster Configuration - Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual

Configuring an Identity Server

1
After you log in to the Administration Console, click Devices > Identity Servers. The system
displays the Identity Servers that can be managed from this Administration Console.
A newly installed Identity Server is in an unconfigured state and is halted. It remains in this state and
cannot function until you create a cluster configuration and assign the Identity Server to the new
configuration. The cluster configuration defines how the Identity Server functions in an Access
Manager configuration. You can assign multiple servers to use the same configuration, which
enables failover and load balancing services.
Section 1.1, "Managing a Cluster Configuration," on page 15

 Section 1.2, "Enabling Role-Based Access Control," on page 27
Section 1.3, "Configuring Secure Communication on the Identity Server," on page 27

Section 1.4, "Security Considerations," on page 32

 Section 1.5, "Translating the Identity Server Configuration Port," on page 36
Section 1.6, "Using netHSM for the Signing Key Pair," on page 41

For information on configuring local authentication options, see the following:
 Chapter 3, "Configuring Local Authentication," on page 103
Chapter 4, "Configuring Advanced Local Authentication Procedures," on page 139

Chapter 6, "Defining Shared Settings," on page 173

Chapter 13, "Configuring Liberty Web Services," on page 291


1.1 Managing a Cluster Configuration

After you install an Identity Server, you must create a cluster configuration in order to configure the
Identity Server. Even if you have only one Identity Server, you must assign it to a cluster
configuration to configure it. If you have multiple Identity Servers, you can create multiple
configurations and assign different Identity Servers to them as shown in Figure 1-1.
Configuring an Identity Server
1
15