Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 238

The authentication profile allows you to select an option to trust any provider, including untrusted
providers. For a secure system, you need to identify the providers you want to trust and create a
configuration for them. To create a trusted provider, you need to obtain the issuer ID of the provider
and the public key certificate for signing certificate from the provider's administrator.
For an Identity Server cluster, the issuer ID is the base URL of the Identity Server plus the following
path:
/sts/services/Trust
For example, if the base URL is
the following value:
https://test.lab.novell.com:8443/nidp/sts/services/Trust
This section explains the following:
 "Creating a Trusted Provider Configuration" on page 238
"Managing the Trusted Provider Configuration" on page 238

Creating a Trusted Provider Configuration
1 In the Administration Console, click Devices > Identity Servers > Edit > CardSpace.
2 On the Trusted Providers page, click New, then fill in the following fields:
Name: Specify a display name for the provider. This name appears in the list of trusted
providers that you can select for an authentication card profile.
Source: This line specifies that the Provider ID is entered manually.
Provider ID: Specify the issuer ID of the trusted provider. For an Identity Server cluster when
the base URL is
following value
https://test.lab.novell.com:8443/nidp/sts/services/Trust
For a third-party identity provider, you need to obtain the issuer ID from the provider.
Signing Certificate: Import the certificate by clicking Browse. Find the signing certificate file,
click Open to import it, then click Next.
3 To confirm the signing certificate, click Finish.
Managing the Trusted Provider Configuration
You can modify the name of the configuration, view and edit the metadata, view and reimport the
signing certificate.
1 In the Administration Console, click Devices > Identity Servers > Edit > CardSpace.
2 On the Trusted Providers page, click the name of a trusted provider.
3 To change the name of the trusted provider, specify a new name on the Configuration page,
then click Apply.
4 To view or edit the metadata, click Metadata.
238 Novell Access Manager 3.1 SP2 Identity Server Guide
https://test.lab.novell.com:8443/nidp
https://test.lab.novell.com:8443/nidp
, the Provider ID is
, the Provider ID is the