Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 191

2 Click New, then click Identity Provider or Service Provider.
3 In the Name option, specify a name by which you want to refer to the provider.
4 Select one of the following sources for the metadata:
Metadata URL: Specify the metadata URL for a trusted provider. The system retrieves
protocol metadata by using the specified URL.
Examples of metadata URLs for an Identity Server acting as a trusted provider with an IP
address 10.1.1.1:
 Liberty:
http://10.1.1.1:8080/nidp/idff/metadata
Liberty:

https://10.1.1.1:8443/nidp/idff/metadata
SAML 2.0:

http://10.1.1.1:8080/nidp/saml2/metadata
SAML 2.0:

https://10.1.1.1:8443/nidp/saml2/metadata
The default values nidp and 8080 are established during product installation; nidp is the Tomcat
application name. If you have set up SSL, you can use https and port 8443.
If your Identity Server and Administration Console are on different machines, use HTTP to
import the metadata. If you are required to use HTTPS with this configuration, you must import
the trusted root certificate of the provider into the trust store of the Administration Console.
You need to use the Java
security directory of the Administration Console.
Linux:
/opt/novell/java/jre/lib/security
Windows Server 2003:
Windows Server 2008:
If you do not want to use HTTP and you do not want to import a certificate into the
Administration Console, you can use the Metadata Text option. In a browser, enter the HTTP
URL of the metadata. View the text from the source page, save the source metadata, then paste
it into the Metadata Text option.
Metadata Text: An editable field in which you can paste copied metadata text from an XML
document, assuming you obtained the metadata via e-mail or disk and are not using a URL. If
you copy metadata text from a Web browser, you must copy the text from the page source.
5 Click Next.
to import the certificate into the
keytool
\Program Files\Novell\jre\lib\security
\Program Files (x86)\Novell\jre\lib\security
cacerts
Configuring SAML and Liberty Trusted Providers 191
file in the