Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 256

Provider ID: Specify the provider ID of the ADFS server. The default value is
urn:federation:treyresearch
Sign-on URL: Specify the URL that the user is redirected to after login. The default value is
https://adfsresource.treyresearch.net/adfs/ls/
Logout URL: (Optional) Specify the URL that the user can use for logging out. The default
value is
Service Provider: Specify the path to the signing certificate of the ADFS server.
3 Click Next, confirm the certificate, then click Finish.
4 Continue with
Configuring the Name Identifier Format
The Unspecified Name Identifier format is the default for a newly created WS Federation service
provider, but this name identifier format doesn't work with the ADFS federation server.
Additionally, some Group Claims (Adatum ClaimApp Claim and Adatum TokenApp Claim) must
be satisfied in order to gain access to the SharePoint server.
1 On the WS Federation page, click the name of the TreyResearch service provider.
2 Click Attributes, then fill in the following fields:
Attribute set: Select the WS Federation attribute set you created.
Send with authentication: Move the All Roles attribute to the Send with authentication list.
3 Click Apply, then click Authentication Response.
4 Select E-mail for the Name Identifier Format.
5 Select LDAP Attribute:mail [LDAP Attribute Profile] as the value for the e-mail identifier.
6 Click OK twice, then update the Identity Server.
7 Continue with
Setting Up Roles for ClaimApp and TokenApp Claims
When users access resources on the ADFS server, they need to have two roles assigned: a ClaimApp
role and a TokenApp role. The following steps explain how to create these two roles so that they are
assigned to all users that log in to the Identity Server.
1 On the Identity Servers page, click Edit > Roles > Manage Policies.
2 Click New, specify a name for the policy, select Identity Server: Roles, then click OK.
3 On the Rule 1 page, leave Condition Group 1 blank.
With no conditions to match, this rule matches all authenticated users.
4 In the Actions section, click New > Activate Role.
5 In the text box, specify ClaimApp.
6 In the Actions section, click New > Activate Role.
7 In the text box, specify TokenApp.
8 Click OK twice, then click Apply Changes.
9 Click Close.
10 On the Roles page, select the role policy you just created, then click Enable.
256 Novell Access Manager 3.1 SP2 Identity Server Guide
https://adfsresource.treyresearch.net/adfs/ls
"Configuring the Name Identifier Format" on page
"Setting Up Roles for ClaimApp and TokenApp Claims" on page
.
.
.
256.
256.