Home
Deploying
IBM® Sametime® consists of a variety of servers and clients, and can be deployed to suit many different environments. The deployment instructions are organized by feature set, beginning with the minimum components that are necessary to support instant messaging, and then expanding the deployment to include features such as audio and video support, and conferencing.
Deploying instant messaging
Instant messaging features are provided primarily by the IBM® Sametime® Community Server, which supports presence, text chats, and two-way phone calls.
Securing the Sametime® Community Server
The IBM® Sametime® server uses the Internet and intranet security features of the Domino® server on which it is installed to authenticate web browser users who access Domino databases on the server.
Enabling SSO between a SAML identity provider and the Sametime® Community Server
The IBM® Sametime® Community Server supports Security Assertion Markup Language (SAML) single sign-on. When this feature is enabled, the Community Server can validate SAML assertions that are generated by a SAML identity provider (idP). This allows a client to authenticate by password to the idP, receive a SAML assertion, and then use that assertion to log in to Sametime, without having to re-enter the password. The Community Server can validate either SAML or LTPA (Lightweight Third-Party Authentication) tokens, but it can only generate LTPA tokens.
Enabling SAML authentication on the Sametime® Community Server
SAML authentication is disabled by default on the IBM® Sametime® Community Server. You can enable SAML with the ST_AUTH_TOKEN setting in the sametime.ini file.

Enabling SAML authentication on the Sametime Community Server

SAML authentication is disabled by default on the IBM® Sametime® Community Server. You can enable SAML with the ST_AUTH_TOKEN setting in the sametime.ini file.

Procedure

Open the sametime.ini file and locate the following section: [ST_BB_NAMES].

By default, the file is stored in the which is stored in the IBM Domino® installation directory; for example, on Microsoft™ Windows™: C:\Program Files\IBM\Domino.
Add or modify the ST_AUTH_TOKEN setting to support SAML authentication as shown in the following example.
```
ST_AUTH_TOKEN=Fork:Saml,Notes
```
Save and close the sametime.ini file.
Restart the Sametime Community Server so that the change can take effect.