WS-Federation Auth Scheme--General Settings

The General settings for WS-Federation authentication identify the Resource Partner and Account partner. The general settings also let you specify signature verification processing.
casso10
HID_wsfed-auth-scheme-general
The General settings for WS-Federation authentication identify the Resource Partner and Account partner. The general settings also let you specify signature verification processing.
The fields in the General section are:
  • Resource Partner ID
    Specifies a URI that uniquely identifies the Resource Partner.
    The Resource Partner ID must match the ID specified for the corresponding Resource Partner object that you configure at the Account Partner.
  • Account Partner ID
    Specifies a URI that uniquely identifies the Account Partner from which assertions for this Resource Partner are issued.
    The Resource Partner accepts assertions only from this Account Partner.
    The value that you enter for the issuer must match the value of the Account Partner ID configured at the Account Partner site.
  • Skew Time Second(s)
    Determines the number of seconds to subtract from the current time to account for Resource Partners clocks that are not synchronized with the Account Partner.
D-Sig Verification
Contains settings that allow you to specify signature verification information.
Disable Signature Processing
Disables all signature processing for this Resource Partner. The Resource Partner must verify the assertion signature for single sign-on.
Caution:
Signature processing is enabled in a production environment. Disabling signature processing only when you are debugging your environment.
  • Alias
    Specifies a unique string under which the certificate is stored in the certificate data store.
    CA Single Sign-On
    uses this certificate to verify the signature of the assertion. This certificate is associated with the private key stored at the Account Partner. An alias entry is required for signature verification.
    Value:
    Alphanumeric characters