Page Comparison

apId defines the Application Provider's unique URI-type identifier with which the AP is registered to use the AE's services.

apId = test.server.fi/test

apPwd defines the password used in authenticating the Application Provider.

apPwd = 4f344534

Client.cert defines the path to the client certificate.

client.cert = client.p12

Clientclient.cert.password defines the password used for protecting the client certificate and the private key.

client.cert.password = fD2s&#hJ

Sslssl-policy.xml defines the path to the XML file containing the MSSP root CA in base64 form. This certificate is used to check the MSSP server certificate when creating the SSL connection.

ssl-policy.xml = ssl-policy.xml

Policypolicy.xml defines the path to the XML file containing the certificate that is used to confirm the signature the MSSP provides to Ubisecure SSO.

policy.xml = policy.xml

Aeae.signatureUrl defines the URL for making signature requests to the MSSP.

ae.signatureUrl = https://server.fi/MSS_Signature

Aeae.statusUrl defines the URL for making status requests to the MSSP.

ae.statusUrl = https://server.fi/MSS_Status

personIdentityAttributes defines the attributes that SSO Server will query from the MSSP regarding the user. Multiple personIdentityAttributes are separated with a white space character. This is the only configuration string where you have to make a decision. It is essential to define this attribute if you are using an unregistered MPKI method.
The definition of this attribute is not mandatory. If the personIdentityAttributes is not defined, no attributes will be queried from the MSSP.

personIdentityAttributes = http://mss.ficom.fi/TS102204/v1.0.0/PersonID#hetu

ae.timeout (optional) defines how long SSO keeps querying the MSSP before terminating the authentication process. The value is in minutes. Default value is 5.

ae.timeout = 5

ae.signatureProfile (optional) defines the signature profile. The only supported signatureprofile is authentication profile (http://mss.ficom.fi/TS102206/v1.0.0/authentication-profile.xml). However, this profile can be overridden with the supplied value.

ae.signatureProfile = http://mss.ficom.fi/TS102206/v1.0.0/authentication-profile.xml

xml.parser.validation (optional) defines whether the xml responses will be validated against the schema. Use for debugging purposes only.

xml.parser.validation = false

eventIdLength (optional) defines the length of generated EventID. Default value is 8.

eventIdLength = 7

initialStatusRequestDelay (optional) defines the delay before the first status request is sent after the initial transaction request. The value is in milliseconds. Default value is 15000.

initialStatusRequestDelay = 4000

consecutiveStatusRequestDelay (optional) defines the delay of the consecutive status requests after the first status request. The value is in milliseconds. Default value is 5000.

consecutiveStatusRequestDelay = 1000

threadPoolSize (optional) defines the number of threads available in the thread pool dedicated to processing ETSIMSS requests and responses. Minimum value is 1. Maximum value is 20. Default value is 1.

threadPoolSize = 2