Liberty 1.1 module

Used for Liberty profiles for Liberty v1.1 federations. Liberty token modules call out to the Tivoli® Federated Identity Manager alias service for alias (name identifier) lookups.

Deployment scenarios for this module type

• Single sign-on federations

  Liberty 1.1 only

Supported modes

• Validate
• Issue
• Exchange

Configuration properties

Issue or Exchange mode

Number of seconds before the issue date that an assertion is considered valid.

Default: 60 seconds

There is no minimum or maximum value enforced.

This field must contain a value.

Amount of time the assertion is valid after being issued (seconds)

Default: 60 seconds

There is no minimum or maximum value enforced.

This field must contain a value.

Include the following attribute types (a "*" means include all types)

Specifies the types of attributes to be inserted during token creation. The attributes consist of information about the identity (user). Use the && character to separate attribute types. By default all types are supported, as indicated by the asterisk ( * ) wildcard.

For example, to add user-defined attribute types type1 and type2, enter:

type1&&type2