Obtaining the Role Assignments

Configure the identity provider and the service provider so that the role assignments can be added to the attribute and retrieved from the attribute.

  1. To export the roles from the identity provider, log in to Administration Console for the identity provider. (In Figure A-3, this is Site A.)

    1. Click Devices > Identity Servers > Edit > Liberty > [Name of Service Provider] > Attributes.

      If you are using SAML 2.0 or SAML 1.1 protocol, the steps are the same. You just need to click the appropriate tab after clicking Edit. The path is the same for these protocols.

    2. Select the attribute set you created, then move All Roles so this attribute is sent with authentication.

    3. Click OK.

    4. Update Identity Server of Site A.

  2. To import the roles from the identity provider to the service provider, log in to Administration Console for the service provider. (In Figure Figure A-3, this is Site B.)

    1. Click Devices > Identity Servers > Edit > Liberty > [Name of Identity Provider]> Attributes.

    2. Select the attribute set you created, then move All Roles so this attribute is obtained with authentication.

    3. Click OK.

    4. Update Identity Server of Site B.

    5. Continue with Configuring Policies to Process Received Roles.