The Gateway acts as a transparent message interceptor and thus does not provide a “viewable” interface. In order to configure the gateway, the corresponding handler has to be invoked. In particular in that case this refers to the SIR.

Prerequisites

Software Installation

Prerequisites

The Gateway relies on the Microsoft .NET Framework 3.5. Necessary components for a successful operation of the Gateway are the SIR and the STS.

Installation

The Gateway can be adapted via the corresponding app.config file. This file can be found in the corresponding installation directory. The entries to be adapted are introduced with the comment "<!-- DEPLOYMENT " followed by a description what kind of information has to be provided.

<!-- Gateway -->

<configuration> 

  ... 

  <microsoft.identityModel>

    <service>

      <issuerNameRegistry ...>

        <trustedCertificates>

          <!-- DEPLOYMENT: Add trusted issuers here. -->

          <add name="CN=ca.breincompany1.com" findValue="CN=ca.breincompany1.com" storeLocation="LocalMachine" storeName="Root" x509FindType="FindBySubjectDistinguishedName" />

        <!-- DEPLOYMENT: Add STS certificate location here -->

          <add name="CN=sts.breincompany1.com" findValue="CN=sts.breincompany1.com" storeLocation="LocalMachine" storeName="My" x509FindType="FindBySubjectDistinguishedName" />

        </trustedCertificates>

      </issuerNameRegistry>

    </service>

  </microsoft.identityModel>

  ...

  <system.serviceModel>

    ...

    <bindings>

      <wsFederationHttpBinding>

        <binding name="OwnSTS">

          <security mode="Message">

            <message>

              <issuer address="http://breinbase.hlrs.de/BREIN/C1/STS/WSTrust.svc/wsHttpBinding" binding="wsHttpBinding" bindingConfiguration="HomeRealmSTS">

                <!-- DEPLOYMENT: Add an identity section if the service does not use his real hostname in the certificate. -->

                <identity> <dns value="sts.breincompany1.com" /> </identity>

              </issuer>

            </message>

          </security>

        </binding>

        <binding name="externalEndpointBindingConfiguration">

          <security mode="Message">

            <message>

              <issuerMetadata address="http://breinbase.hlrs.de/BREIN/C1/STS/mex">

                <!-- DEPLOYMENT: Add an identity section if the service does not use his real hostname in the certificate. -->

                <identity> <dns value="sts.breincompany1.com" />                    </identity>

              </issuerMetadata>

            </message>

          </security>

        </binding>

      </wsFederationHttpBinding>

      ...

</configuration>