This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, go to https://wso2.com/documentation/.

Outbound Provisioning with SPML

Owned by Former user (Deleted)
Last updated: Apr 04, 2016 by Former user (Deleted)
2 min read

WSO2 Identity Server enables you to manage users with SPML compliant providers. The following steps illustrate how to do this.

Tip: When configuring the identity provider to provision users using SPML, you must ensure that the trusted identity provider is SPML compliant. Sun Identity Manager, Oracle waveset, and ActiveRoles Server SPML provider are some examples for SPML compliant providers.

Configuring an identity provider

  1. Download the WSO2 Identity Server from here and run it.
  2. Log in to the Management Console as an administrator.
  3. Navigate to the Main menu to access the Identity menu. Click Add under Identity Providers. See here for more information on this.
  4. Enter "spml Identity provider" as Identity Provider name for the purposes of this scenario.
  5. Under the Outbound Provisioning Connectors section, expand the SPML Provisioning Connector form.

    Do the following changes:

    1. Select the Enable Connector checkbox.

    2. Enter a Username for your SPML compliant provider.

    3. Enter a Password for the SPML compliant provider.

    4. Enter the SPML endpoint URL as SPML Endpoint.

    5. Enter the SPML support object from the server as the SPML ObjectClass.

  6. Click Update to save changes.

Configuring outbound provisioning

  1. In the Main menu under the Identity section, click List under Service Providers. The list of service providers you added appears.
  2. Click the Resident Service Provider link.

  3. Then expand the Outbound Provisioning Configuration section and add the created identity provider and select spml from the dropdown list.

    If we enable Blocking, Identity Server will wait for the response from the Identity Provider to continue.

  4. Click Update.
  5. On the Main tab in the management console, click Add under Users and Roles in the Identity menu.
  6. Click Add New Role and add a role named "spml". See Configuring Roles and Permissions for more information on this process.
  7. On the Main tab in the management console, click Add under Users and Roles in the Identity menu.
  8. Click Add New User. See Configuring Users for more information on this process.
  9. Provide a username and a password(with confirmation) and Click Next.
  10. Add "spml" as the role in the resulting screen.
  11. Click Finish to create the user.

The user you created is now provisioned to the SPML provider server.