Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual page 146

Liberty: https://10.1.1.1:8443/nidp/idff/metadata
SAML 1.1: http://10.1.1.1:8080/nidp/saml/metadata
SAML 1.1: https://10.1.1.1:8443/nidp/saml/metadata
SAML 2.0: http://10.1.1.1:8080/nidp/saml2/metadata
SAML 2.0: https://10.1.1.1:8443/nidp/saml2/metadata
The default values nidp and 8080 are established during product installation; nidp is the Tomcat
application name. If you have set up SSL, you can use https and port 8443.
1 In the Administration Console, click Devices > Identity Servers > Servers > Edit > [Protocol].
For the protocol, click Liberty, SAML 1.1, or SAML 2.0.
2 Click New, then click Identity Provider or Service Provider.
3 In the Name option, specify a name by which you want to refer to the provider.
4 Select one of the following sources for the metadata:
Metadata URL: Specify the metadata URL for a trusted provider. The system retrieves
protocol metadata using the specified URL.
If your Identity Server and Administration Console are on different machines, use HTTP to
import the metadata. If you are required to use HTTPS with this configuration, you must import
the trusted root certificate of the provider into the trust store of the Administration Console.
You need to use the Java
security directory of the Administration Console.
Linux:
Windows:
If you do not want to use HTTP and you do not want to import a certificate into the
Administration Console, you can use the Metadata Text option. In a browser, enter the HTTP
URL of the metadata. View the text from the source page, save the source metadata, then paste
it into the Metadata Text option.
Metadata Text: An editable field in which you can paste copied metadata text from an XML
document, assuming you obtained the metadata via e-mail or disk and are not using a URL. If
you copy metadata text from a Web browser, you must copy the text from the page source.
146 Novell Access Manager 3.1 SP1 Identity Server Guide
keytool
/opt/novell/java/jre/lib/security
C:\Program Files\Novell\jre\lib\security
to import the certificate into the file in the
cacerts