IBM. Tivoli. Federated Identity Manager Version 6.2.2 ...

IBM? Tivoli? Federated Identity Manager Version 6.2.2

Administration Guide

SC23-6191-02

IBM? Tivoli? Federated Identity Manager Version 6.2.2

Administration Guide

SC23-6191-02

Note Before using this information and the product it supports, read the information in "Notices" on page 315.

Edition notice Note: This edition applies to version 6, release 2, modification 2 of IBM Tivoli Federated Identity Manager (product number 5724-L73) and to all subsequent releases and modifications until otherwise indicated in new editions. ? Copyright IBM Corporation 2004, 2011. US Government Users Restricted Rights ? Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

Contents

Figures . . . . . . . . . . . . . . vii

Tables . . . . . . . . . . . . . . . ix

About this publication . . . . . . . . xi

Intended audience . . . . . . . . . . . . xi Access to publications and terminology . . . . . xi

IBM Tivoli Federated Identity Manager library xii Prerequisite publications . . . . . . . . . xiii Related publications . . . . . . . . . . xiii Accessing terminology online . . . . . . . xiii Accessing publications online . . . . . . . xiii Ordering publications. . . . . . . . . . xiv Accessibility . . . . . . . . . . . . . . xiv Tivoli technical training . . . . . . . . . . xiv Support information . . . . . . . . . . . xiv Statement of Good Security Practices . . . . . . xv Conventions used in this book . . . . . . . . xv Typeface conventions . . . . . . . . . . xv Operating system-dependent variables and paths . . . . . . . . . . . . . . . xvi

Chapter 1. Using the console . . . . . 1

Logging in and logging out . . . . . . . . . 1 Task grouping overview . . . . . . . . . . 2 Task portlets . . . . . . . . . . . . . . 4 Task wizards . . . . . . . . . . . . . . 5 Help . . . . . . . . . . . . . . . . . 5

Online help for administration task panels . . . 6 Online help for console functions . . . . . . 6 Accessing the Tivoli Federated Identity Manager information center . . . . . . . . . . . 6

Chapter 2. Managing administrators . . 7

Modifying administrator properties . . . . . . . 7 Adding an administrator . . . . . . . . . . 7 Deleting an administrator . . . . . . . . . . 8

Chapter 3. Modifying LTPA key and timeout settings . . . . . . . . . . . 9

Chapter 4. Modifying identity mapping configurations . . . . . . . . . . . 11

Changing the identity mapping module instance . . 11 Modifying identity mapping properties . . . . . 12

Chapter 5. Managing federations . . . 15

Modifying federation properties . . . . . . . 15 Viewing your partners in a federation . . . . . 15 Exporting federation properties . . . . . . . . 16 Deleting a federation . . . . . . . . . . . 16

? Copyright IBM Corp. 2004, 2011

Chapter 6. Managing federation partners . . . . . . . . . . . . . . 17

Enabling or disabling a partner . . . . . . . . 17 Modifying partner properties . . . . . . . . 17

Using a keystore for multiple SOAP endpoint server certificate validation . . . . . . . . 18 Deleting a partner . . . . . . . . . . . . 19

Chapter 7. Managing modules. . . . . 21

Viewing module type properties . . . . . . . 21 Modifying module types . . . . . . . . . . 21 Deleting a module type . . . . . . . . . . 22 Creating a module instance . . . . . . . . . 22 Modifying module instance properties . . . . . 23 Deleting a module instance . . . . . . . . . 23 Creating a trust service chain . . . . . . . . 23 Creating trust chain like an existing chain . . . . 25 Modifying trust service chain properties . . . . . 26 Modifying chain module properties . . . . . . 27 Deleting a trust service chain . . . . . . . . 28 Chain mapping identification properties . . . . . 28 Chain mapping lookup properties . . . . . . . 28 Chain Identification properties . . . . . . . . 31 Supported module types . . . . . . . . . . 31

Authorization module . . . . . . . . . . 32 Default mapping module . . . . . . . . . 33 Delegation module . . . . . . . . . . . 34 Digital Signature module . . . . . . . . . 34 Dynamic Chain Selection module . . . . . . 35 Java Authentication and Authorization Service module . . . . . . . . . . . . . . . 35 Kerberos module . . . . . . . . . . . 36 Kerberos delegation module . . . . . . . . 37 Key Encryption and Signature Service STS module . . . . . . . . . . . . . . . 38 Liberty 1.1 module . . . . . . . . . . . 41 Liberty 1.2 module . . . . . . . . . . . 41 LTPA module . . . . . . . . . . . . . 42 PassTicket module . . . . . . . . . . . 44 SAML 1.0 module . . . . . . . . . . . 46 SAML 1.1 module . . . . . . . . . . . 49 SAML 2.0 module . . . . . . . . . . . 53 Security token service message logger module. . 58 Security token service universal user module . . 60 Tivoli Access Manager authentication module . . 61 Tivoli Access Manager for e-business authorization module . . . . . . . . . . 62 Tivoli Access Manager for e-business credential module . . . . . . . . . . . . . . . 62 Tivoli Access Manager for e-business Global Signon Lockbox module . . . . . . . . . 64 Tivoli Directory Integrator module. . . . . . 66 Username token module . . . . . . . . . 67 X.509 module. . . . . . . . . . . . . 69 Token module response files. . . . . . . . . 70

iii

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download