Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual page 173

5 Click Next, then specify the attributes for the personal card.
Attribute set: Select the CardSpace attribute set.
Required attributes: From the Available attribute list, move the attributes that you want the
card to return to the Required attribute list.
For this scenario, move Common First Name and Personal Private Identifier to the Required
attribute list. The Personal Private Identifier attribute should always be in the required list.
Optional attributes: From the Available attribute list, move the attributes that the card can
return, but is not required to return, to the Optional attribute list.
For this scenario, move Common Last Name.
6 Click Next, then specify the user identification method.
Satisfied contracts: (Optional) For this scenario, do not select a contract.
Allow federation: Enable this option so that the personal card can be linked with the user's
account. If you do not enable this option, the user is always prompted for credentials.
Authenticate: Select Authenticate for the user identification method. This prompts the user for
a name and a password the first time the card is used for authentication.
7 Click Finish > OK.
8 Update the Identity Server.
9 In the browser, enter the base URL of the Identity Server.
10 Select the authentication card you have created.
The CardSpace selector opens.
11 Create a personal card that meets the requirements of the authentication profile. Provide a value
for First Name claim and optionally for the Last Name.
12 Save the card, then click Send.
13 Enter the username and a password for an account in the user store.
You are logged in. On subsequent logins, you do not need to enter the username and password.
A personal card can be used to access resources protected by an Access Gateway, but it needs used
with a managed card. For this scenario, you need to complete the tasks in the following sections:
Section 6.4, "Authenticating with a Managed Card," on page 174
Section 6.5, "Authenticating with a Managed Card Backed by a Personal Card," on page 178
Section 6.8, "Using CardSpace Cards for Authentication to Access Gateway Protected
Resources," on page 186
For more information about configuring the Identity Server to be a relying party and the other
available options, see Section 6.6, "Configuring the Identity Server as a Relying Party," on
page 179.
Configuring CardSpace 173