This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, visit https://wso2.com/documentation/.

Outbound Provisioning with SPML

Owned by Former user (Deleted)
Last updated: Oct 31, 2017 by Former user (Deleted)
2 min read

WSO2 Identity Server enables you to manage users with SPML compliant providers. The following steps illustrate how to do this.

  1. Install and configure a SPML compliant provider. Sun Identity Manager, Oracle waveset, and ActiveRoles Server SPML provider are some examples for SPML compliant providers.
  2. Download the WSO2 Identity Server from here and run it.
  3. Log in to the Management Console as an administrator.
  4. Navigate to the Main menu to access the Identity menu. Click Add under Identity Providers. See here for more information on this.
  5. Enter "spml Identity provider" as Identity Provider name for the purposes of this scenario.
  6. Under the Outbound Provisioning Connectors section, expand the SPML Provisioning Connector form.

    Do the following changes:

    1. Select the Enable Connector check box.

    2. Enter a Username for your SPML compliant provider.

    3. Enter a Password for the SPML compliant provider.

    4. Enter the SPML endpoint URL as SPML Endpoint.

    5. Enter the supported SPML ObjectClass from the server. This object class defines the user attributes passed to the server.

  7. Click Update to save changes.

  8. In the Main menu under the Identity section, click Resident under Service Providers.

  9. Then expand the Outbound Provisioning Configuration section and add the created identity provider and select spml from the dropdown list.

    • If Blocking is enabled, WSO2 IS will wait for the response from the Identity Provider to continue provisioning.

    • If Enable Rules is enabled, the users will be provisioned based on pre-defined XACML rules. For more information about this, see Rule Based Provisioning.

  10. Click Update.
  11. On the Main tab in the management console, click Add under Users and Roles in the Identity menu.
  12. Click Add New Role and add a role named "spml". See  Configuring Roles and Permissions  for more information on this process.
  13. On the Main tab in the management console, click Add under Users and Roles in the  Identity  menu.
  14. Click Add New User. See Configuring Users for more information on this process.
  15. Provide a username and a password(with confirmation) and Click Next.
  16. Add "spml" as the role in the resulting screen.
  17. Click Finish to create the user.

The user you created is now provisioned to the SPML provider server.