Creating Authentication Classes; Creating Basic Or Form-Based Authentication Classes - Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual

Users Are Receiving Invalid Credential Messages
The <SAML_Affiliate_Object>.SAML-Assertion.AuthorizedLoginMethods.Security object
contains two attributes that determine how long credentials are valid. If your Identity Server and
eDirectory server are not time synchronized, the credentials can become invalid before a user has
time to use them.
Either make sure that the time of your Identity Server and eDirectory server are synchronized, or
increase the value of the authsamlValidAfter and authsamlValidBefore attributes of the SAML
affiliate object.
Secrets Aren't Stored in the LDAP Directory
1 Open an LDAP browser and connect to the eDirectory server.
2 Browse to the user object.
3 Verify that the user object contains the LDAP attribute that you have specified as the attribute
to store the secrets.
4 If the attribute exists, browse to the schema and verify that the attribute has the following
characteristics:
Single valued
Case ignore
String

2.2 Creating Authentication Classes

Authentication classes let you define ways of obtaining end user credentials.You specify the code
(Java class) and properties to be executed to implement a particular authentication type.
Several authentication classes are included with Access Manager to provide a variety of ways to
authenticate end users. Custom authentication classes provided by other vendors can also be
configured to run in the system.
Section 2.2.1, "Creating Basic or Form-Based Authentication Classes," on page 88
Section 3.1, "Configuring for RADIUS Authentication," on page 105
Section 3.2, "Configuring Mutual SSL (X.509) Authentication," on page 106
Section 3.3, "Creating an ORed Credential Class," on page 111
Some classes require additional configuration to enable their use for authentication. See the
following sections:
Section 3.4, "Configuring for Kerberos Authentication," on page 113
Section 3.5, "Configuring Access Manager for NESCM," on page 125

2.2.1 Creating Basic or Form-Based Authentication Classes

1 In the Administration Console, click Devices > Identity Server > Servers > Edit > Local >
Classes.
88 Novell Access Manager 3.1 SP1 Identity Server Guide