Select the following settings:

6-18 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation

6.9.2.2 Configuring Oracle Identity Federation to Connect to a Protected SOAP URL

On the client side, Oracle Identity Federation implements support for basic authentication when connecting to peer providers on the SOAP channel. You need to update the Oracle Identity Federation configuration so that the server can use the entered credentials when connecting to the SOAP endpoint of the remote provider. Take these steps to enable Oracle Identity Federation to connect to a protected SOAP URL: 1. Log in to the Fusion Middleware Control console for the domain where Oracle Identity Federation is deployed.

2. Navigate to Oracle Identity Federation, then Administration, then Federations.

3. Select the remote provider that requires HTTP basic authentication on the SOAP channel, and click Edit. 4. In the Oracle Identity Federation Settings tab, select Enable HTTP Basic Authentication and enter the user name and password the server must use when connecting to the remote provider.

5. Click Apply.

6.10 Configuring the SAML 2.0 IdP Discovery Common Domain Cookie Profile

SAML 2.0 enables a service provider to discover the identity providers a user has used to authenticate. After authenticating a user, the IdP adds its Provider ID to the value of a cookie in the user’s browser. The SP then reads this cookie and discovers the IdPs used. For the IdPs and SPs to write to and read from this cookie, the cookie must be in a domain common to all IdPs and SPs. Thus, this cookie is called the Common Domain Cookie CDC. When acting as an SP, if the CDC profile is enabled and an SSO operation is initiated without the provider ID of the target IdP, Oracle Identity Federation reads the common domain cookie and performs SSO with the first IdP in the list. You can also configure Oracle Identity Federation to prompt the user to choose the IdP with which to perform SSO. The user is then able to select from the list of all IdPs in the CDC that are also trusted by Oracle Identity Federation, acting as an SP. This section describes how to configure Oracle Identity Federation to use the CDC profile. It contains these topics: ■ Preliminary Steps to Set Up the CDC ■ Configuring the CDC Profile as an Identity Provider ■ Configuring the CDC Profile as a Service Provider ■ Configuring Oracle Identity Federation to Display List of Trusted Providers in CDC

6.10.1 Preliminary Steps to Set Up the CDC

The common domain cookie is always marked as secure, so use of the CDC Profile requires enabling SSL, whether acting as an identity provider or a service provider. To enable SSL, follow the instructions in Section 8.1, Configuring SSL for Oracle Identity Federation .