Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 229

To configure this scenario:
1 In the Administration Console, click Devices > Identity Servers > Edit.
2 In the Enabled Protocols section, enable STS and CardSpace.
3 Click CardSpace > Authentication Card, then fill in the following fields:
ID: (Optional) Leave this field blank.
Text: Specify the text that is displayed on the card to the user, for example,
Image: Select the image from the drop-down list. For CardSpace, you can use the default
CardSpace image or any other image in the list.
Show Card: Enable the Show Card option. The Identity Server then displays this card as a
login option.
4 In the Profiles section, click New, then fill in the following fields:
Name: Specify a display name for the profile, such as
ID: (Optional) Leave this field blank.
Text: Specify the text that is displayed on the card to the user for this profile, such as
.
Card
Issuer: From the drop-down list, select Personal Card.
Token Type: SAML 1.1 is displayed as the token type for the assertion.
5 Click Next, then specify the attributes for the personal card.
Attribute set: Select the CardSpace attribute set.
Required attributes: From the Available attribute list, select the attributes that you want the
card to return and move them to the Required attribute list.
For this scenario, move Common First Name and Personal Private Identifier to the Required
attribute list. The Personal Private Identifier attribute should always be in the required list.
Optional attributes: From the Available attribute list, select the attributes that the card can
return, but is not required to return, and move them to the Optional attribute list.
For this scenario, move Common Last Name.
6 Click Next, then specify the user identification method.
Satisfied contracts: (Optional) For this scenario, do not select a contract.
Allow federation: Enable this option so that the personal card can be linked with the user's
account. If you do not enable this option, the user is always prompted for credentials.
Authenticate: Select Authenticate for the user identification method. This prompts the user for
a name and a password the first time the card is used for authentication.
7 Click Finish > OK.
8 Update the Identity Server.
9 In the browser, enter the base URL of the Identity Server.
10 Select the authentication card you have created.
The CardSpace selector opens.
11 Create a personal card that meets the requirements of the authentication profile. Provide a value
for First Name claim and optionally for the Last Name.
12 Save the card, then click Send.
CardSpace
.
Personal Card
Configuring CardSpace 229
.
Personal