Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 231

4 In the Replace pop-up, click the Select Certificate icon, select the certificate you created for
SSL, then click OK.
5 When the certificate appears in the Certificate box, click OK, then click Close.
6 Update the Identity Server.
Configuring a CardSpace Identity Provider
When you configure an Identity Server to be a CardSpace identity provider, you need to create a
managed card template. Users can then use the template to create and install a managed card in their
card selector.
1 In the Administration Console, click Devices > Identity Servers > Edit > CardSpace.
2 Click Managed Card Templates > New, then fill in the following fields:
Name: Specify a display name for the template.
Description: Specify the text to be displayed on the card. This can contain information about
how the card can be used or the type of resource that can be accessed with the card.
Image: Specify the image to be displayed on the card. Select the image from the drop-down
list. To add an image to the list, click Select local image. The default image is the Novell Card.
Require Identification of Relying Party in Security Token: Select this option to require the
relying party to provide identification when it requests a security token. For this scenario, do
not enable this option because the instructions haven't explained how to configure this option
for the relying party.
Allow Users to Back a Managed Card Using a Personal Card: Select this option to allow
users to back a managed card with a personal card. If this option is not selected, you cannot
complete the steps in
Personal Card," on page
3 Click Next, then fill in the following fields:
Attribute set: From the list of available sets, select the CardSpace attribute set.
Selected claims: From the list of available claims, select the attributes for the managed card
and move them to the list of selected claims.
Do not remove the Personal Private Identifier claim. Add the Common First Name claim.
4 Click Finish.
5 Click STS > Authentication Methods.
6 Move the Secure Name/Password - Form method to the Methods list.
7 Click OK.
8 Update the Identity Server.
9 Continue with "Creating and Installing a Managed Card" on page
Creating and Installing a Managed Card
The following instructions assume you are on a Windows client. The procedure is very similar to
what is required on a Linux client and should be easily adapted.
1 In Internet Explorer on the client machine, enter the base URL of the Identity Server that is
acting as the identity provider.
2 Select the Secure Name/Password card, then log in to the Identity Server.
Section 8.3.3, "Authenticating with a Managed Card Backed by a
234.
231.
Configuring CardSpace 231