6.5 Authenticating with a Managed Card Backed by a Personal Card

The following configuration assumes that you have completed the configuration steps for Section 6.4, Authenticating with a Managed Card and that you enabled the Allow Users to Back a Managed Card Using a Personal Card option. This configuration scenario uses the managed card that you have created and explains how to install a new instance of it and back it with a personal card.

  1. In a browser on the client machine, enter the base URL of the Identity Server acting as the identity provider.

  2. Select the Secure Name/Password card, then log in to the Identity Server.

  3. Click New Card, then click the Managed Card Template.

  4. Specify a name for the card, then enable the Use Personal Card For Authentication option.

  5. When CardSpace opens, select a personal card, then click Send.

  6. On the New Card page, click Create Card.

  7. Click Open.

    CardSpace opens.

  8. Click Install and Exit.

    The managed card backed by a personal card is installed.

  9. Log out and close the browser.

  10. In the browser, enter the base URL of the Identity Server acting as the relying party.

  11. Select the CardSpace card.

  12. In your card selector, select the managed card that is backed by a personal card, then click Send.

  13. When prompted, enter the username and password, and log in.

  14. Click the Federation tab.

    It displays the name of the card that you used to log in with and allows you to break the federation with the personal card.

    On subsequent logins, you can use the card to log in without entering any credentials.

    For information on using this card with resources protected by the Access Gateway, see Section 6.8, Using CardSpace Cards for Authentication to Access Gateway Protected Resources