Creating or editing an STS endpoint

A Security Token Service (STS) endpoint provides the connection information that Studio and the Integration Appliance use to connect to an STS. You can request for a SAML 2.0 token/assertion from STS, which complies to WS-Trust specification.

  1. In the Create Endpoint or Edit Endpoint pane, configure the fields as described in the following table.
    Note: Changing the configuration properties of an endpoint affects all orchestrations that use that endpoint in the project as the edits are global, not local.
Table 1. Endpoint field description
Field Name Description
Location  
Host Name Specify the host name or IP address of the STS that this endpoint connects to.
Port Specify the port number of the STS.
Login Description
Log into the Server as an Anonymous User Select this option to connect to STS anonymously (where user account is not required).
Log into the Server with User Name and Password Select this option to connect to STS using a user account. Specify the User Name and Password.
Authentication Allows you to select the type of authentication that the Integration Appliance uses when connecting to an STS server. From the list, select one of the following authentication options:
  • Basic - Sends the user name and password you specify unencrypted to the server. This authentication scheme is the least secure.
User Name   Specify the User Name for the account used to connect to the STS.
Password Specify the Password for the account used to connect to the STS.
Security Description
None Select the None option if no security is required.
HTTPS Select the HTTPS option to enable secure HTTP over SSL.  
  • When client authentication is required, select the Client Certificate Alias Name check box to specify that the Integration Appliance acting as a client should provide a certificate to STS. If selected, the name of the certificate must be provided. (For information about how to import a client certificate and private key for use with client authentication, see Importing an end-entity certificate). A certificate specified at the endpoint level with this check box takes precedence over certificates specified on the Security> Certificates > Settings > Client SSL entry in the WMC.
Protocol Version Select the protocol used for secure HTTP over SSL. By default, the protocol version used is SSL_TLSv2.
Connection Timeout - The following Connection field is available for the Remote Server option only.
Time out after ___ seconds when establishing a connection to the Endpoint. The number of seconds before a timeout occurs between the Integration Appliance attempting to establish a connection to the Endpoint and the time it takes for the endpoint to respond to the connection request. For an STS activity, the amount of time the Integration Appliance attempts to establish a connection to STS before timing out. A connection timeout is different from an activity timeout because an activity timeout occurs after the connection to the endpoint has already been established. An activity timeout specifies the amount of time in seconds before a timeout occurs between the activity invoking a request on an endpoint and the time it takes the endpoint to respond.
Proxy - The following Proxy fields are available for the Remote Server option only.
Login Description
Connect via a Proxy Server Select this check box if the request has to be routed through a proxy server.
Authentication Allows you to select the type of authentication that the Integration Appliance uses when connecting to a remote server. From the drop-down list, select one of the following authentication options:
  • Basic - Sends the user name and password you specify unencrypted to the server. This authentication schema is the least secure.
  • NTLM - Requires an instance of NTCredentials to be available for the domain name of the server. This authentication is the most secure authentication option as the Integration Appliance authenticates a connection and not a request; therefore, the Integration Appliance authenticates every time a new connection is made. The connection must remain open during the authentication process. You cannot use NTLM to authenticate with both a proxy and server.
    Note: Do not prefix the user name with the domain.
Realm / Domain If you select the Basic authentication option, specify a realm. If you select the NTLM authentication option, specify a domain.
Host Name Specify the host name or IP address of the proxy server that the request is routed through.
Port Specify the port number of the proxy server that the request is routed through.
User Name   Specify the User Name for the account used to connect to the proxy server.
Password Specify the Password for the account used to connect to the proxy server.
Remote Endpoint Configuration  
Endpoint Runs Behind Firewall Select the check box to enable the secure connector name property so that secure connector can be used if STS is running behind a firewall.
Secure Connector Name Specify the name of the secure connector that is used to connect to STS running behind a firewall. For example, if an orchestration containing an STS activity is deployed on to Cast Iron Live (cloud), then the secure connector needs to be configured.
Note: For some of the fields in the endpoint, you can define configuration properties to supply the values for these fields.  The
icon is displayed when you click in a field that supports a configuration property and a configuration property of the same type has already been configured for the project.



Feedback | Notices


Timestamp icon Last updated: Thursday, December 17, 2015


http://pic.dhe.ibm.com/infocenter/wci/v7r0m0/topic/com.ibm.wci.doc/sts_create_edit_endpoint.html