Selecting Attributes For A Trusted Provider - Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual

5.4.3 Selecting Attributes for a Trusted Provider

You can select attributes that an identity provider sends and a service provider receives in an
authentication. You can also create attribute sets or select attribute sets that you created globally in
Section 4.1, "Configuring Attribute Sets," on page
1 In the Administration Console, click Devices > Identity Servers > Servers > Edit > Liberty [or
SAML 1.0 or SAML 2.0] > [Provider] > Attributes.
2 (Conditional) To create an attribute set, select New Attribute Set from the Attribute Set drop-
down menu.
An attribute set is a group of attributes that can be exchanged with the trusted provider. For
example, you can specify that the local attribute of any attribute in the Liberty profile (such as
Informal Name) matches the remote attribute specified at the service provider.
2a Specify a set name, then click Next.
2b On the Define Attributes page, click New.
2c Select a local attribute.
2d Optionally, you can provide the name of the remote attribute and a namespace.
2e Click OK.
2f To add other attributes to the set, repeat
2g Click Finish.
3 Select an attribute set
4 Select attributes from the Available list, and move them to the left side of the page.
If you are configuring a service provider, the left side of the page lists the attributes that
you want sent in an assertion to the service provider.
If you are configuring an identity provider, the attributes that you move to the left side of
the page lists the attributes you want to be obtained during authentication.
5 Click OK twice.
6 Update the Identity Server.
133.
Step 2b through Step 2e.
Configuring SAML and Liberty Trusted Providers 155