Configure an identity user store to which the Filr users should authenticate. See Configuring Identity User Stores
in the NetIQ Access Manager Administration Guide.
Authentication classes let you define ways of obtaining end-user credentials.
Perform the following steps to create a class:
Log in to the NAM Administration Console.
Click Devices > Identity Server > Servers > Edit > Local > Classes.
Click New to launch the Create Authentication Class wizard, then fill in the following fields:
Display name: Specify a name for the class.
Java class: Select Other.
Java class path: Specify com.novell.nam.authentication.FilrAuthClass.
Click Next and then click New to add the following properties for the class:
Property Name: Specify FilrWsURL.
Property Value: Specify the HTTP or HTTPS URL of the Filr server in the format: http(s)://IP_Address_of_Filr_Server:port_number.
Continue with Creating the Authentication Method.
Authentication methods let you associate authentication classes with user stores.
Log in to the NAM Administration Console.
click Devices > Identity Server > Servers > Edit > Local > Methods.
Click New to launch the Create Authentication Method wizard, then fill in the following fields:
Display name: Specify a name for the method.
Class: Specify the name of the class that you created in Creating the Authentication Class.
Identifies User: Ensure that this option is selected.
User stores: Add user stores to search. You can select from the list of all the user stores you have set up. If you have several user stores, the system searches through them based on the order specified here. If a user store is not moved to the User stores list, users in that user store cannot use this method for authentication.
Continue with Creating the Authentication Contract.
Authentication contracts define how authentication occurs. Perform the following steps to create a new contract with the authentication method you created in Creating the Authentication Method.
Log in to the NAM Administration Console.
click Devices > Identity Server > Servers > Edit > Local > Contracts.
Click New to launch the Create Authentication Method Wizard, then fill in the following fields:
Display name: Specify a name for the contract.
Methods: Add the authentication methods that you created before from the list of the available methods.
To save the configuration changes, click Devices > Identity Servers, then click Update All.
Continue with Configuring a Reverse-Proxy Single Sign-On Service for Filr.