Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 125

4 Fill in the following fields:
Display name: Specifies the name of the authentication contract.
URI: Specifies a value that uniquely identifies the contract from all other contracts. It is used to
identify this contract for external providers and is a unique path value that you create. No
spaces can exist in the URI field.
The following are all valid values for the URI:
/mycompany/name/password/form
http://mycompany.com/login
secure/form/password/bcompany
Password expiration servlet: Specifies a URL to a page where the user can change his or her
password. This applies only to eDirectory servers when the password is expired or is within the
grace login period. You must use eDirectory to change the number of grace logins.
For more information about how use this type of servlet, see Section 3.4.1, "Using a Password
Expiration Service," on page 127.
Allow User Interaction: If you specify a password expiration servlet, you can enable this
option, which allows the users to decide whether to go to the servlet and change their
passwords or to skip the servlet. If you always want to force the users to go the servlet to
change their passwords, do not enable this option.
Authentication Level: A number you can assign to this authentication contract to specify its
security level or rank. You use this setting to preserve authentication contracts of a higher
security level. When you enable the Satisfiable by a contract of equal or higher level option on
this page, the system uses this value as a reference.
For example, you might create a name/password authentication contract and assign it to level
one. You might also create an X.509 authentication contract and assign it to level two. If a user
supplies the credentials for the X.509 level-two contract, the system does not require the
credentials to satisfy the name/password level-one authentication contract.
Configuring Local Authentication 125