# OpenAM Administration Guide
12.3. Configuring Identity Providers

Sidebar | Prev | Up | Next

### 12.3.1. Hints for Assertion Content

Use the following hints to adjust settings on the Assertion Content tab page.

Signing and Encryption

Request/Response Signing

  Specifies what parts of messages the identity provider requires the service provider to sign digitally.

Encryption

  When selected, the service provider must encrypt NameID elements.

Certificate Aliases

  Specifies aliases for certificates in the OpenAM key store that are used to handle digital signatures, and to handle encrypted messages.

  Specify a Key Pass if the private key password is different from the key store password, which is stored encrypted in the `.keypass` file for the server. For instructions on working with key pairs, also see To Change the Signing Key for Federation.

NameID Format

NameID Format List

  Specifies the supported name identifiers for users that are shared between providers for single sign on. If no name identifier is specified when initiating single sign on, then the identity provider uses the first one in the list.

NameID Value List

  Maps name identifier formats to user profile attributes. The `persistent` and `transient` name identifiers need not be mapped.

Authentication Context

Mapper

  Specifies a class that implements the `IDPAuthnContextMapper` interface and sets up the authentication context.

Default Authentication Context

  Specifies the authentication context used if no authentication context specified in the request.

Supported Contexts

  Specifies the supported authentication contexts, where the Key and Value can specify a corresponding OpenAM authentication method, and the Level corresponds to an authentication module authentication level.

Assertion Time

Not-Before Time Skew

  Grace period in seconds for the `NotBefore` time in assertions.

Effective Time

  Validity in seconds of an assertion.

Basic Authentication

Enabled, User Name, Password

  When enabled, authenticate with the specified user name and password at SOAP end points.

Assertion Cache

Enabled

  When enabled, cache assertions.