Configuring The Attributes Sent With Authentication - Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual

3 Select an attribute set
4 Select attributes from the Available list, and move them to the left side of the page.
The attributes that you move to the left side of the page are the attributes you want to be
obtained during authentication.
5 Click OK twice.
6 Update the Identity Server.

7.6.2 Configuring the Attributes Sent with Authentication

When the Identity Server creates its response for the service provider, it uses the attributes listed on
the Attributes page. The response needs to contain the attributes that the service provider requires. If
you do not own the service provider, you need to contact the administrator of the service provider
and negotiate which attributes you need to send in the response. The service provider can then use
these attributes to identify the user, to create policies, to match user accounts, or if it allows
provisioning, to create a user accounts on the service provider.
1 In the Administration Console, click Devices > Identity Servers > Edit > [Protocol] >
[Service Provider] > Attributes.
2 (Conditional) To create an attribute set, select New Attribute Set from the Attribute Set drop-
down menu.
An attribute set is a group of attributes that can be exchanged with the trusted provider. For
example, you can specify that the local attribute of any attribute in the Liberty profile (such as
Informal Name) matches the remote attribute specified at the service provider.
2a Specify a set name, then click Next.
2b On the Define Attributes page, click New.
2c Select a local attribute.
2d Optionally, you can provide the name of the remote attribute and a namespace.
2e Click OK.
For more information on this process, see
page 173.
2f To add other attributes to the set, repeat
2g Click Finish.
Section 6.1, "Configuring Attribute Sets," on
Step 2b through Step 2e.
Configuring SAML and Liberty Trusted Providers 201