Configuring the Attributes Set with Authentication

When Identity Server creates its response for the service provider, it uses the attributes listed on the Attributes page. The response needs to contain the attributes that the service provider requires. If you do not own the service provider, you need to contact the administrator of the service provider and negotiate which attributes you need to send in the response. The service provider can then use these attributes to identify the user, to create policies, to match user accounts, or if it allows provisioning, to create a user accounts on the service provider.

  1. On the Home page, click Applications > Select a Cluster > [Service Provider] > Attributes.

  2. (Conditional) To create an attribute set, select New Attribute Set from Attribute Set.

    An attribute set is a group of attributes that can be exchanged with the trusted provider. For example, you can specify that the local attribute of any attribute in the Liberty profile (such as Informal Name) matches the remote attribute specified at the service provider.

    1. Specify a set name, then click Next.

    2. On the Define Attributes Set page, click Plus icon.

    3. Select a local attribute.

    4. Optionally, you can provide the name of the remote attribute and a namespace.

      For more information about this process, see Configuring Attribute Sets.

    5. To add other attributes to the set, repeat Step 2.b through Step 2.d.

    6. Click Save.

  3. Select an attribute set

  4. Select attributes from the Obtain at authentication list.

  5. Click Done > Save.

  6. Update Identity Server.