9.3. Configuring the Federation Service

The simplest way to configure the OpenIG Federation Gateway is to use the OpenAM task wizard to generate a Fedlet and then use the Fedlet configuration files in the Gateway configuration directory. If you use the Fedlet configuration files, simply unpack Fedlet.war and copy all the files listed above into $HOME_DIR/.ForgeRock/SAML/. You do not have to modify the files to do basic IDP and SP initiated SSO with OpenIG. Note that the sample Federation Gateway config.json templates uses /saml as the URI so your Fedlet endpoint should be specified as protocol://host.domain:port/saml.

If you do not use the Fedlet wizard, then follow the instructions for the unconfigured Fedlet and then copy the Fedlet configuration files to the $HOME_DIR/.ForgeRock/SAML/ directory. You must also export the metadata from the IDP and copy it to idp.xml in the same directory.