SECURING
This configuration document is used for both Notes federated login and Web federated login.
Before you begin
Have the metadata .xml file that you exported from your IdP, for exampleFederationMetadata.xml, in a location from which you can access it so that you can import it into the IdP configuration document.
Procedure
1. Open idpcat.nsf.
2. Click Add IdP Config to create a new configuration document.
3. Click Import XML file and select the metadata .xml file you exported from your IdP. In ADFS, this file name is typicallyFederationMetadata.xml.
Table 1. Fields in the IdP Configuration document whose values are generated from themetadata .xml file
Note: The value in this field is a subset of the expected URL to the IdP. The Domino server generates the full URL when necessary.
Note: This field appears only when the Type field is set to SAML 2.0.
For example,url.oasis.names.tc:SAML:2.0:protocol.
6. In the Service provider ID field, enter a value to identify the ID vault server as service provider partner with the IdP.
b. In the Sites that are trusted field, list trusted identity provider (IdP) web host names that differ from the host name configured in the Basicstab. Separate entries with a semicolon or a return character.
c. Leave the Enforce TLS field set to Yes if the Notes client embedded browser requires that any URL accessed at the IdP during the login sequence be protected with TLS.
9. Ensure that SAML assertions are encrypted to protect sensitive data. Complete the task Generating a certificate to encrypt SAML assertionsYour organization may require SAML assertions to be encrypted if assertions include attributes that contain sensitive personal data, for example, social security numbers. Domino encrypts entire SAML assertions; partial encryption of specific attributes is not available.. Complete it before you complete the task Exporting the ID vault server configuration to an .xml fileComplete this task to export the configuration information in an ID vault server IdP configuration document to an xml file, ServiceProvider.xml. Then, you can import it into the Relying party trust (ADFS) to fill in the Domino information automatically., so that the certificate is included in the idp.xmlfile.
Parent topic: Configuring ID vault servers for Notes or Web federated SAML login Next topic: Exporting the ID vault server configuration to an .xml file