Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual page 210

2 Specify how users are identified on the SAML 2.0 or Liberty provider. Select one of the
following methods:
Authenticate: Select this option when you want to use login credentials. This option
prompts the user to log in at both the identity provider and the service provider on first
access. If the user selects to federate, the user is prompted, on subsequent logins, to
authenticate only to the identity provider.
Provision Account: Select this option when the users on the identity provider do not have
accounts on the service provider. This option allows the service provider to trust any user
that has authenticated to the trusted identity provider
This option requires that you specify a user provisioning method.
Attribute matching: Select this option when you want to use attributes to match an
identity server account with a service provider account. This option requires that you
specify a user matching method.
3 Select one of the following:
If you selected the Attribute matching option, select a method, then click OK.
If you have not created one, continue with
Matching Method," on page
If you selected the Provision account option, select a method, then click OK.
If you have not created one, continue with
Method," on page
If you selected the Authenticate option with the Allow Provisioning option, select a
method, then click OK.
210 Novell Access Manager 3.1 SP1 Identity Server Guide
Allow 'Provisioning': Select this option to allow users to create an account when
they have no account on the service provider.
This option requires that you specify a user provisioning method.
Prompt for password on successful match: Select this option to prompt the user
for a password when the user's name is matched to an account, to ensure that the
account matches.
213.
214.
Section 8.3, "Configuring the Attribute
Section 8.4, "Defining the User Provisioning