Sun OpenSSO Enterprise 8.0 Integration Guide

About the Deployment

In this deployment, OpenSSO Enterprise is installed in the Realm mode of operation. The OpenSSO Enterprise data store is configured to store configuration data.

A sub-realm named idm is created on OpenSSO Enterprise. The user data store for this sub-realm is a Sun Directory Server data store that has the OpenSSO Enterprise schema loaded into it. This sub-realm is used later when configuring the policy agent. The policy agent is deployed on Identity Manager to regulate access to the Identity Manager server. Identity Manager uses the MySQL database as its data store. Identity Manager can be configured to use MYSQL or Oracle databases as its configuration data store.

Figure 1–1 Deployment Architecture

Architecture includes OpenSSO Enterprise, Identity
Manager, policy agent, and three data stores.

About Sun Identity Manager

Sun Identity Manager enables you to securely and efficiently manage and user access to accounts and resources, and to distribute access management overhead. By mapping Identity Manager objects to the entities you manage such as users and resources, you significantly increase the efficiency of your operations.

The Identity Manager solution enables you to:

Manage account access to a large variety of systems and resources.
Securely manage dynamic account information for each user's array of accounts.
Set up delegated rights to create and manage user account data.
Handle large numbers of enterprise resources, as well as an increasingly large number of extranet customers and partners.
Securely authorize user access to enterprise information systems. With Identity Manager, you have fully integrated functionality to grant, manage, and revoke access privileges across internal and external organizations.

See the Sun Identity Manager product documentation for more information.

About Sun Directory Server Enterprise Edition

Sun Directory Server Enterprise Edition provides secure, highly available, scalable directory services for storing and managing identity data. Directory Server Enterprise Edition is the foundation of an enterprise identity infrastructure. It enables mission-critical enterprise applications and large-scale extranet applications to access consistent and reliable identity data. Directory Server Enterprise Edition provides a central repository for storing and managing identity profiles, access privileges, application and network resource information. It also provides secure, on-demand synchronization of passwords, users, and groups with Microsoft Active Directory. See the Sun Java System Directory Server 6.3 product documentation.

About Sun MySQL

MySQL is the world's most popular open source database software. MySQL has become the preferred choice for Web, Web 2.0, SaaS, ISV, Telecom companies and forward-thinking corporate IT Managers because it eliminates the major problems associated with downtime, maintenance and administration for modern, online applications. Powerful administration features enable users to fine-tune the server to optimize performance for the particular details of an embedded or bundled application. Plus, a pluggable storage engine architecture enables you to mix and match storage engines or just use what you need for an efficient optimized footprint.

Note –

Identity Manager supports MySQL as a database resource in development or production deployments. MySQL is only supported as a repository database server in development deployment. See the MySQL documentation athttp://www.mysql.com/doc/ for more details.

Software Versions Used in the Deployment

Table 1–1 Software Versions Used in the Deployment


Product	Download Location
Sun Solaris Operating System 10	`http://www.sun.com/software/solaris/get.jsp`
JDK 5.0 Update 16	`http://java.sun.com/javase/downloads/index_jdk5.jsp`
OpenSSO Enterprise 8.0 (Build 5b)	`https://opensso.dev.java.net/public/use/index.html#stableopensso`
Sun Identity Manager 8.0
Sun Java Web Server 7.0	Sun Java System Web Server 7.0 Update 2
Sun Java Application Server 9.1	Sun Java Application Server 9.1
Sun Java Directory Server 6.3	`http://www.sun.com/software/products/directory_srvr_ee/get1.jsp` Choose Directory Server Enterprise Edition 6.x.
MySQL 5.0 Identity Manager supports MySQL as a database resource in development or production deployments. MySQL is only supported as a repository database server in development deployment. See `http://www.mysql.com/` for more details.	`http://dev.mysql.com/downloads/mysql/5.0.html#solaris`
MySQL Connector/J 5.0	`http://dev.mysql.com/downloads/`
Sun Java AM Policy Agent 3.0 (for Sun Application Server 9.1)	`https://opensso.dev.java.net/public/use/index.html#stableagent`
NetBeans IDE 6.0	`http://download.netbeans.org/netbeans/6.0/final/`
Sun Identity Manager IDE Plug-in 8.0 Beta 1	`https://identitymanageride.dev.java.net/`