WSO2 Identity Server enables you to manage users with SPML compliant providers. The following steps illustrate how to do this.
...
Tip |
---|
Tip: When configuring the identity provider to provision users using SPML, you must ensure that the trusted identity provider is SPML compliant. Sun Identity Manager, Oracle waveset, and ActiveRoles Server SPML provider are some examples for SPML compliant providers. |
Anchor | ||||
---|---|---|---|---|
|
Configuring an identity provider
- Download the WSO2 Identity Server from here and run it.
- Log in to the Management Console as an administrator.
- Navigate to the Main menu to access the Identity menu. Click Add under Identity Providers. See here for more information on this.
- Enter "spml Identity provider" as Identity Provider name for the purposes of this scenario.
- Under the Outbound Provisioning Connectors section, expand the SPML Provisioning Connector form.
Do the following changes:Select the Enable Connector checkbox.
Enter a Username for your SPML compliant provider.
Enter a Password for the SPML compliant provider.
Enter the SPML endpoint URL as SPML Endpoint.
Enter the SPML support object from the server as the SPML ObjectClass.Add an attribute claim mapping according to the SPML provider if relevant.
Click Update to save changes.
Configuring outbound provisioning
- In the Main menu under the Identity section, click List under Service Providers. The list of service providers you added appears.
- Click the Resident Service Provider link.
Then expand the Outbound Provisioning Configuration section and add the created identity provider and select spml from the dropdown list.
Info If we enable Blocking, Identity Server will wait for the response from the Identity Provider to continue.
- Click Update.
- On the Main menu tab in the management console, click Add under Users and Roles .
Click Roles. This link is only visible to users with the Admin role. in the Identity menu. - Click Add New Role and add a role named "spml". See Configuring Roles and Permissions for more information on this process.
- On the Main tab in the management console, click Add under Users and Roles .
Click Users. This link is only visible to users with the Admin role. in the Identity menu. - Click Add New User. See Configuring Users for more information on this process.
- Provide a username and a password(with confirmation) and Click Next.
- Add "spml" as the role in the resulting screen.
- Click Finish to create the user.
...