In the Initiate SSO Provider ID Parameter field, enter the name of the

Server Administration 4-23 ■ Target URL query parameter for Oracle Identity Federation it is TARGET. The parameter contains the URL on which the user lands after a successful sign-on. ■ ProviderID URL query parameter for Oracle Identity Federation it is providerid. The parameter contains the SP providerID when SP initiates a SAML1.x SSO ■ SourceID required for the artifact profile. The value is obtained from the IdP metadata, from tag saml1md:SourceID As SP, needs to send to peer provider IdP: ■ ProviderID https:server_name:server_portfedsp ■ Signing Certificate if signing SOAP requests ■ Assertion Consumer URL The URL to which assertions should be sent https:server_name:server_portfedspsamlv11sso

4.4 Configuring Identities

Use this page to locate and manage user and federated identities, and to maintain search options. ■ About Federated Identities ■ Identities - Federations ■ Identities - Users ■ Identities - Search Options

4.4.1 About Federated Identities

When a user performs SSO for the first time, and Oracle Identity Federation is configured with a federation data store, it creates a federation record for the user containing information about the federated identity. This includes: ■ the Username – the User ID with which Oracle Identity Federation identifies the user. ■ the User description – the user description ■ the IdP Provided Name ID – the Name ID provided by the identity provider when SSO was performed ■ the IdP Provided Name ID Format – the format of the Name ID provided by the identity provider. This field will be empty if the format is persisent. ■ the IdP Provided Name ID Qualifier - the Name ID qualifier, optionally provided by the identity provider. ■ the Protocol Version – the protocol version used when performing SSO. ■ the SP Provided Name ID – the Name ID provided by the service provider. This will be blank when the federation is created. ■ the SP Provided Name ID Format – the format of the Name ID provided by the service provider. This field will be empty if the format is persisent. ■ the SP Provided Name ID Qualifier – the Name ID qualifier, optionally provided by the service provider. Note: Liberty 1.x support is deprecated.