Administer > System security > SAML Single Sign-On > SAML SSO setup > Configure SAML SSO using the standalone IdM > Task 12: Replace JRE policy files for the IdM server

Task 12: Replace JRE policy files for the IdM server

Important This task is required for the standalone IdM only.

By default, Microsoft ADFS uses the SHA-256 secure hash algorithm, which requires you to replace the default JRE policy files used by the IdM web application server.

To do this, follow these steps:

  1. Download the unlimited strength JCE policy files for your JRE:

    • local_policy.jar

    • US_export_policy.jar

    For example, for Tomcat 8.0, visit the Oracle website to download the unlimited strength JCE policy files:

    http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html (for JRE 8)

    http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html (for JRE 7)

  2. On the IdM web application server host, browse to the <JRE>\lib\security folder.
  3. Replace the policy files with the unlimited strength JCE policy files that you have downloaded.