70N/A#

70N/A# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.

1356N/A#

70N/A# Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved

1356N/A#

70N/A# The contents of this file are subject to the terms

70N/A# of the Common Development and Distribution License

919N/A# (the License). You may not use this file except in

919N/A# compliance with the License.

919N/A#

919N/A# You can obtain a copy of the License at

919N/A# https://opensso.dev.java.net/public/CDDLv1.0.html or

919N/A# opensso/legal/CDDLv1.0.txt

919N/A# See the License for the specific language governing

919N/A# permission and limitations under the License.

919N/A#

919N/A# When distributing Covered Code, include this CDDL

919N/A# Header Notice in each file and include the License file

919N/A# at opensso/legal/CDDLv1.0.txt.

919N/A# If applicable, add the following below the CDDL Header,

919N/A# with the fields enclosed by brackets [] replaced by

919N/A# your own identifying information:

919N/A# "Portions Copyrighted [year] [name of copyright owner]"

919N/A#

70N/A# $Id: famFederationCommon.properties,v 1.5 2010/01/08 22:41:38 exu Exp $

70N/A#

70N/A

70N/A# Portions Copyrighted 2011 ForgeRock AS

493N/A

70N/AsunFAMFederationCommon=Common Federation Configuration

70N/Aa101=Datastore SPI implementation class

1179N/Aa101.help=The Federation system uses this class to get/set user profile attributes

70N/Aa101.help.txt=The default implementation uses the Identity repository APIs to access user profile attributes. A custom implementation must \

911N/Aimplement the <code>com.sun.identity.plugin.datastore.DataStoreProvider</code> interface.

1179N/Aa102=ConfigurationInstance SPI implementation class

1179N/Aa102.help=The Federation system uses this class to fetch service configuration

911N/Aa102.help.txt=The default implementation uses the SMS APIs to access service configuration. A custom implementation must \

970N/Aimplement the <code>com.sun.identity.plugin.configuration.ConfigurationInstance</code> interface.

977N/Aa103=Logger SPI implementation class

970N/Aa103.help=The Federation system uses this class to record log entries.

970N/Aa103.help.txt=The default implementation uses the Logging APIs to record log entries. A custom implementation must \

1356N/Aimplement the <code>com.sun.identity.plugin.log.Logger</code> interface.

1356N/Aa104=SessionProvider SPI implementation class

1356N/Aa104.help=The Federation system uses this class to interface with the session service.

970N/Aa104.help.txt=The default implementation uses the standard authentication and SSO APIs to access the session service. A custom \

970N/Aimplementation must implement the <code>com.sun.identity.plugin.session.SessionProvider</code> interface.

970N/Aa105=Maximum allowed content length

970N/Aa105.help=The maximum content length allowed in federation communications (in bytes)

970N/Aa106=Keystore file

970N/Aa107=Keystore password file

970N/Aa108=Key password file

970N/Aa109=Default signing certification alias

70N/Aa110=PasswordDecoder SPI implementation class

1179N/Aa110.help=The Federation system uses this class to decode password encoded by OpenAM.

493N/Aa110.help.txt=The default implementation uses the internal OpenAM decryption API to decode passwords. A custom implementation must \

70N/Aimplement the <code>com.sun.identity.saml.xmlsig.PasswordDecoder</code> interface.

970N/Aa111=SignatureProvider SPI implementation class

970N/Aa111.help=The Federation system uses this class to digitally sign SAML documents.

970N/Aa111.help.txt=The default implementation uses the XERCES APIs to sign the documents. A custom implementation must \

1196N/Aimplement the <code>com.sun.identity.saml.xmlsig.SignatureProvider</code> interface.

1196N/Aa112=KeyProvider SPI implementation class

1196N/Aa112.help=The Federation system uses this class to provide access to the underlying Java keystore.

1196N/Aa112.help.txt=The default implementation uses the Java Cryptographic Engine to provide access to the Java keystore. A custom \

70N/Aimplementation must implement the <code>com.sun.identity.saml.xmlsig.KeyProvider</code> interface.

970N/Aa113=Check presence of certificates

970N/Aa113.help=Enable checking of certificates against local copy

970N/Aa113.help.txt=When enabled this checks if the partner's signing cert included in the Federation XML doc is the same as the one in stored \

970N/Ain the said partner's meta data

970N/Aoff=Disabled

970N/Aon=Enabled

a114=XML canonicalization algorithm

http\://www.w3.org/2001/10/xml-exc-c14n#=http://www.w3.org/2001/10/xml-exc-c14n#

http\://www.w3.org/2001/10/xml-exc-c14n#WithComments=http://www.w3.org/2001/10/xml-exc-c14n#WithComments

http\://www.w3.org/TR/2001/REC-xml-c14n-20010315=http://www.w3.org/TR/2001/REC-xml-c14n-20010315

http\://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments=http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments

a114.help=The algorithm used to canonicalize XML documents

a115=XML signature algorithm

http\://www.w3.org/2000/09/xmldsig#rsa-sha1=http://www.w3.org/2000/09/xmldsig#rsa-sha1

http\://www.w3.org/2000/09/xmldsig#hmac-sha1=http://www.w3.org/2000/09/xmldsig#hmac-sha1

http\://www.w3.org/2000/09/xmldsig#dsa-sha1=http://www.w3.org/2000/09/xmldsig#dsa-sha1

http\://www.w3.org/2001/04/xmldsig-more#rsa-md5=http://www.w3.org/2001/04/xmldsig-more#rsa-md5

http\://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160=http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160

http\://www.w3.org/2001/04/xmldsig-more#rsa-sha256=http://www.w3.org/2001/04/xmldsig-more#rsa-sha256

http\://www.w3.org/2001/04/xmldsig-more#rsa-sha384=http://www.w3.org/2001/04/xmldsig-more#rsa-sha384

http\://www.w3.org/2001/04/xmldsig-more#rsa-sha512=http://www.w3.org/2001/04/xmldsig-more#rsa-sha512

http\://www.w3.org/2001/04/xmldsig-more#hmac-md5=http://www.w3.org/2001/04/xmldsig-more#hmac-md5

http\://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160=http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160

http\://www.w3.org/2001/04/xmldsig-more#hmac-sha256=http://www.w3.org/2001/04/xmldsig-more#hmac-sha256

http\://www.w3.org/2001/04/xmldsig-more#hmac-sha384=http://www.w3.org/2001/04/xmldsig-more#hmac-sha384

http\://www.w3.org/2001/04/xmldsig-more#hmac-sha512=http://www.w3.org/2001/04/xmldsig-more#hmac-sha512

a115.help=The algorithm used to sign XML documents

a116=XML transformation algorithm

http\://www.w3.org/2001/10/xml-exc-c14n#=http://www.w3.org/2001/10/xml-exc-c14n#

http\://www.w3.org/2001/10/xml-exc-c14n#WithComments=http://www.w3.org/2001/10/xml-exc-c14n#WithComments

http\://www.w3.org/TR/2001/REC-xml-c14n-20010315=http://www.w3.org/TR/2001/REC-xml-c14n-20010315

http\://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments=http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments

http\://www.w3.org/TR/1999/REC-xslt-19991116=http://www.w3.org/TR/1999/REC-xslt-19991116

http\://www.w3.org/2000/09/xmldsig#base64=http://www.w3.org/2000/09/xmldsig#base64

http\://www.w3.org/TR/1999/REC-xpath-19991116=http://www.w3.org/TR/1999/REC-xpath-19991116

http\://www.w3.org/2000/09/xmldsig#enveloped-signature=http://www.w3.org/2000/09/xmldsig#enveloped-signature

http\://www.w3.org/TR/2001/WD-xptr-20010108=http://www.w3.org/TR/2001/WD-xptr-20010108

http\://www.w3.org/2002/04/xmldsig-filter2=http://www.w3.org/2002/04/xmldsig-filter2

http\://www.w3.org/2002/06/xmldsig-filter2=http://www.w3.org/2002/06/xmldsig-filter2

http\://www.nue.et-inf.uni-siegen.de/~geuer-pollmann/#xpathFilter=http://www.nue.et-inf.uni-siegen.de/~geuer-pollmann/#xpathFilter

a116.help=The algorithm used to transform XML documents

a117=SAML Error Page URL

a117.help=The URL SAML2 of the SAML2 error page

a117.help.txt=If an error occurs in the SAML2 engine, the user is redirected to this URL. Both relative and absolute URLs are supported.\

Users are redirected to an absolute URL using the configured HTTP Binding whereas relative URLs are displayed within the request.

a118=SAML Error Page HTTP Binding

a118.help=The possible values are HTTP-Redirect or HTTP-POST

a119=Monitoring Agent Provider Class

a119.help=The Federation system uses this class to gain access to the monitoring system

a119.help.txt=The default implementation uses the built-in OpenAM monitoring system. A custom implementation must \

implement the <code>com.sun.identity.plugin.monitoring.FedMonAgent</code> interface.

a120=Monitoring Provider Class for SAML1

a120.help=The SAMLv1 engine uses this class to gain access to the monitoring system

a120.help.txt=The default implementation uses the built-in OpenAM monitoring system. A custom implementation must \

implement the <code>com.sun.identity.plugin.monitoring.FedMonSAML1Svc</code> interface.

a121=Monitoring Provider Class for SAML2

a121.help=The SAML2 engine uses this class to gain access to the monitoring system

a121.help.txt=The default implementation uses the built-in OpenAM monitoring system. A custom implementation must \

implement the <code>com.sun.identity.plugin.monitoring.FedMonSAML2Svc</code> interface.

a122=Monitoring Provider Class for ID-FF

a122.help=The ID-FF engine uses this class to gain access to the monitoring system

a122.help.txt=The default implementation uses the built-in OpenAM monitoring system. A custom implementation must \

implement the <code>com.sun.identity.plugin.monitoring.FedMonIDFFSvc</code> interface.