9.1 Configuring a Liberty Profile

The profile specifies what methods of communication are available at the server for the Liberty protocol. These settings affect the metadata for the server and should be determined prior to publishing to other sites.

  1. In the Administration Console, click Devices > Identity Servers > Edit > Liberty > Profiles.

  2. Specify whether to support Artifact or Post binding for Login when acting as an identity provider or a service provider.

    • The Artifact binding provides an increased level of security by using a back channel means of communication between the two servers during authentication.

    • The Post method uses HTTP redirection to accomplish communication between the servers.

  3. Specify the communication methods for Single Logout, Federation Termination, and Register Name.

    The Single Logout communication channel is used when the user logs out. The Federation Termination channel is used when the user selects to defederate an account. The Register Name channel is used when the provider supplies a different name to register for the user.

    Select one or more of the following. SOAP is the default setting if the service provider has not specified a preference.

    • HTTP uses HTTP 302 redirects or HTTP GET requests to communicate logout requests from the identity provider to the service provider.

    • SOAP uses the SOAP back channel over HTTP messaging to communicate requests from the identity provider to the service provider.

  4. Click OK, then update the Identity Server.

  5. (Conditional) If you have set up trusted providers and have modified the profile, these providers need to reimport the metadata from this Identity Server.