The IDP Administrator class, method, and contract control who has the rights to create a logging ticket. You need to know the DNs of the operators who are going to be responding to the users who are experiencing problems.
Click Devices > Identity Servers > Edit > Local.
To create the class:
Click Classes.
Click New, then specify the following values:
Display name: IDP Administrator
Java class: Other
Java class path: com.novell.nidp.authentication.local.IDPAdministratorClass
Click Next, then click Finish.
To create the method:
Click Methods.
Click New, then specify the following values:
Display name: IDP Administrator Method
Class: IDP Administrator
Identifies user: Deselect this option.
User Stores: Select the user stores that contain your operators, then move them to the list of User Stores.
In the Properties section, click New, then specify the following to create an IDP Administrator:
Property Name: Administrator1
The Property Name must begin with Administrator; append a value to this so that each property has a unique value.
Property Value: cn=jdoe,o=users
The Property Value must be the DN of an operator in the user stores you selected in Step 3.b. Use LDAP typed comma notation for the DN.
Repeat Step 3.c for each IDP Administrator you require.
You can later modify the method to add or remove IDP Administrators when responsibilities change.
Click Finish.
To create the contract:
Click Contracts.
Click New, then specify the following values:
Display name: IDP Administrator Contract
URI: urn:novell:nidp:admin:contract
Methods: Move the IDP Administrator Method to the Methods list.
Leave all other fields with their default values.
Click Next, then specify the following values for the authentication card:
ID: IDPAdmin
Text: IDP Administrator
Image: Select an image from the list, such as the IDP Administrator image that was created for this type of contract.
Show Card: Deselect this option.
Click Finish.
Continue with Creating Logging Session Class, Method, and Contract.