Summary of the content on the page No. 1
Novell Confidential 00front.fm last saved 4/14/03 Manual 3/17/03103
Novell
Liberty Identity Provider
TM
for Novell eDirectory
®
www.novell.com
ADMINISTRATION GUIDE
Summary of the content on the page No. 2
Novell Confidential 00front.fm last saved 4/14/03 Manual 3/17/03103 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions
Summary of the content on the page No. 3
Novell Confidential 00front.fm last saved 4/14/03 Manual 3/17/03103 Novell Trademarks eDirectory is a trademark of Novell, Inc. Novell is a registered trademark of Novell, Inc. in the United States and other countries. Third-Party Trademarks All third-party trademarks are the property of their respective owners.
Summary of the content on the page No. 4
Novell Confidential 00front.fm last saved 4/14/03 Manual 3/17/03103
Summary of the content on the page No. 5
Novell Confidential libertyTOC.fm last saved 4/14/03 Manual 3/17/03103 Contents About This Guide 3 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Documentation Updates . . . . . . .
Summary of the content on the page No. 6
Novell Confidential libertyTOC.fm last saved 4/14/03 Manual Version: 3/17/03103 B Modifying Apache 39 Modifying the Apache Configuration Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Importing Trusted Roots. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 C Troubleshooting Your Liberty IDP Installation and Confi
Summary of the content on the page No. 7
Novell Confidential 00prface.fm last saved 4/14/03 Manual (99a) 3/17/03103 About This Guide Introduction The purpose of this documentation is to help you install, configure, and administer the Liberty ® TM identity provider for Novell eDirectory infrastructure. The audience for this documentation is network administrators. This guide is divided into the following sections. Chapter 1, “Overview,” on page 5 — An explanation of the benefits of the Liberty identity provider and an overview of th
Summary of the content on the page No. 8
Novell Confidential 00prface.fm last saved 4/14/03 Manual Version: 3/17/03103 4 Liberty Identity Provider for Novell eDirectory
Summary of the content on the page No. 9
Novell Confidential 01overvw.fm last saved 4/14/03 Manual (99a) 3/17/03103 1 Overview This section covers the following topics: Understanding the Liberty Alliance Liberty Alliance Architecture Understanding the Value of the Novell Liberty Identity Provider Benefits of the Liberty Identity Provider for Novell eDirectory Service Provider Sample Code Understanding the Liberty Alliance The Liberty Alliance is a consortium of business leaders with a vision to enable a networked world in which
Summary of the content on the page No. 10
Novell Confidential 01overvw.fm last saved 4/14/03 Manual Version: 3/17/03103 The result of this link is realized on the user's next authentication to the Liberty SP. If he or she is connected to his Liberty IDP, he or she will be authenticated to the Liberty SP with no user interaction. It is important to realize that it is the user who controls his or her identity federation. Thus, the user is responsible for federation (linking) and defederation of his or her identity information. Benefit
Summary of the content on the page No. 11
Novell Confidential 01overvw.fm last saved 4/14/03 Manual 3/17/03103 Authentication is performed using a login form, which the user completes and submits to the Liberty IDP. If the user’s credentials (username and password) are verified, the user is authenticated and is able to federate his or her identities with chosen service providers. Give Users Control to Federate and Defederate Their Identity Information A user has the option to federate his or her identity whenever he or she connects t
Summary of the content on the page No. 12
Novell Confidential 01overvw.fm last saved 4/14/03 Manual Version: 3/17/03103 8 Liberty Identity Provider for Novell eDirectory
Summary of the content on the page No. 13
Novell Confidential 02instal.fm last saved 4/14/03 Manual (99a) 3/17/03103 2 Installing the Liberty Identity Provider ® TM This chapter provides instructions for installing Liberty identity provider for Novell eDirectory software and contains the following topics: Product Components System Requirements Installing Liberty Identity Provider Software Uninstalling the Liberty Identity Provider Software Product Components Your Liberty identity provider (Liberty IDP) installation includes the fo
Summary of the content on the page No. 14
Novell Confidential 02instal.fm last saved 4/14/03 Manual Version: 3/17/03103 The Novell-supported platform for installing the Liberty IDP is a Windows* 2000 server or workstation. To run the Liberty IDP, you must have: a static IP address an iManager-compatible browser: Internet Explorer 5.5 or above, or Netscape* 6.2 or above For additional information and full system requirements for Novell eDirectory 8.7, refer to the Novell eDirectory 8.7 Quick Start, available at the Novell Documentat
Summary of the content on the page No. 15
Novell Confidential 02instal.fm last saved 4/14/03 Manual 3/17/03103 Figure 1 Liberty Identity Provider Introduction 4 If you accept the License Agreement, select the accept button, then click Next. Figure 2 License Agreement 5 The Liberty IDP created by the installation is configured to run in a non-SSL mode by default. This mode is sufficient for testing purposes only. You cannot use the non-SSL mode in a production environment. For information on how to convert to SSL mode, see Chapter 4,
Summary of the content on the page No. 16
Novell Confidential 02instal.fm last saved 4/14/03 Manual Version: 3/17/03103 Figure 3 SSL Warning 6 The Liberty IDP requires Novell iManager to be installed. Even if you already have iManager installed on your machine, click Next to proceed with the installation. Figure 4 Install iManager The iManager installation is a wizard that consists of several screens that run on top of your Liberty IDP installation wizard. InstallAnywhere will guide you through the iManager installation. 6a Select t
Summary of the content on the page No. 17
Novell Confidential 02instal.fm last saved 4/14/03 Manual 3/17/03103 Figure 5 iManager Installation 6b Read the Introduction screen, then click Next. Figure 6 iManager Introduction 6c Read the Detection Summary screen, which indicates the components that will be installed with iManager, then click Next. WARNING: If the Web server, servlet container, and/or JVM show as already installed, you must quit the installation, remove the component(s), then begin the installation again. To be sure you
Summary of the content on the page No. 18
Novell Confidential 02instal.fm last saved 4/14/03 Manual Version: 3/17/03103 Figure 7 Detection Summary 6d Select the directory where iManager should be installed. The default is C:\Program Files\Novell. Figure 8 Choose Install Folder 6e Click Next. 6f Review the Pre-Installation Summary. If you need to make changes, click Previous to return to the previous screens. Otherwise, click Install. 14 Liberty Identity Provider for Novell eDirectory
Summary of the content on the page No. 19
Novell Confidential 02instal.fm last saved 4/14/03 Manual 3/17/03103 Figure 9 Pre-Installation Summary iManager is installed on your machine. (This installation might take a few minutes.) 6g If the iManager installation is successful, you will get an Install Complete screen. Review this screen, then click Done. Figure 10 Install Complete You are returned to the Liberty IDP installation. If iManager does not install successfully, see Appendix C, “Troubleshooting Your Liberty IDP Installation a
Summary of the content on the page No. 20
Novell Confidential 02instal.fm last saved 4/14/03 Manual Version: 3/17/03103 be located in the same container where your server object is located. Export the trusted root from the key material object. For more information, see “Importing Trusted Roots” on page 42. Figure 11 LDAP Configuration Page 8 Click Next. 9 All Liberty single sign-on communication must be digitally signed. To support the digitally signing, the installer program will create a digital signing certificate. In order to cre
