Getting Started

• Release Notes

• New Features

• Hardware and Software Requirements

• Compatibility Issues

• Installation Notes

• Architecture Overview

• Installed Product Layout

• Getting Started with the Access Manager Console

Planning Your Access Manager Deployment

• Access Manager Deployment Planning

• Defining Access Manager Business Requirements

• Designing a Logical Architecture

• Access Manager Components

• Using a Load Balancer

• Using a Multiple JVM Environment

• Directory Server Replication Considerations

Configuring Access Manager After Installation

• Defining the Access Manager Sample Configuration Script Input File

• Using the Access Manager amconfig Script

• Deploying Additional Instances of Access Manager

• Configuring and Reconfiguring an Instance of Access Manager

• Installing and Configuring BEA WebLogic 8.1 as a Web Container

• Installing and Configuring IBM WebSphere 5.1 as a Web Container

• Configuring Access Manager in SSL Mode

• Changing the Password Encryption Key

Implementing Access Manager Deployment Design

• Installing Access Manager on Multiple Host Servers

• Configuring an Access Manager Deployment as a Site

• Enabling Session Property Change Notifications

• Using a Load Balancer With Access Manager

• Implementing Access Manager Session Failover

• Setting Session Quota Constraints

Administering Realms

• Access Control Realms Overview

• Creating and Managing Realms

• Adding Services to a Realm

• Defining Privileges

Administering Data Stores

• Creating a new LDAPv3 Data Store

• LDAPv3 Repository Plug-in Attributes

• Creating a New AMSDK Repository Plug-in

Configuring and Developing Access Manager Authentication

• Authentication Overview

• Authentication Module Types

• Creating Authentication Module Instances

• Creating Authentication Module Chains

• The User Interface Login URL

• Authentication Service Failover

• Persistent Cookies

• Validation Plug-in Interfaces

• Overview of Authentication APIs and SPIs

• Using Authentication APIs

• Using Authentication SPIs

• Using Access Manager Distributed Authentication

• Customizing the Distributed Authentication User Interface

Configuring and Developing Access Manager Policies

• Policy Management Overview

• The Access Manager Policy Framework

• Policy Types

• URL Policy Agent Service

• The Role of Policy Agent Software

• Adding a Policy Enabled Service

• Creating Normal and Referral Policies

• Creating Policies for Peer Realms and Sub Realms

• Modifying Normal and Referral Policies

• Policy Configuration Service

• About the Policy APIs

• Developing Custom Subjects, Conditions, and Referrals

• Creating Policies for a New Service

• Developing and Running a Policy Evaluation Program

• Programmatically Constructing Policies

Installing and Using Access Manager Policy Agents

• The Role of Policy Agent Software

• Policy Agent 2.2 Release Notes

• Policy Agent 2.2 for Sun Java System Application Server 8.1

• Policy Agent 2.2 for Sun Java System Web Server 6.1

• Policy Agent 2.2 for Apache HTTP Server 2.0.54

• Policy Agent 2.2 for Apache Tomcat 5.5 Servlet/JSP Container

• Policy Agent 2.2 for BEA WebLogic Server/Portal 8.1 SP4

• Policy Agent 2.2 for Microsoft Internet Information Services 6.0

• Policy Agent 2.2 Guide for Sun Java System Web Proxy Server 4.0

• Policy Agent 2.2 Guide for IBM WebSphere Application Server 5.1.1

• Policy Agent 2.2 Guide for IBM WebSphere Application Server 6.0

• Policy Agent 2.2 Guide for IBM WebSphere Portal Server 5.1.0.2

• Policy Agent 2.2 Guide for SAP Enterprise Portal 6.0 and Web Application Server 6.40

• Policy Agent 2.2 Guide for IBM Lotus Domino 6.5.4

• Policy Agent 2.2 Guide for BEA WebLogic Server 9.0/9.1

Managing User Sessions and Single Sign-On

• Overview of Access Manager User Sessions

• Cookies and Session Objects

• Session Management

• Single Sign-On Session

• The Single Sign-On Java APIs

• Using the SSO Code Samples

Configuring and Managing Access Manager Federation

• Introduction to the Liberty Alliance Project

• Features of Federation

• Process of Federation

• Creating and Configuring Provider and Affiliate Entities

• Creating and Configuring Authentication Domains

• Auto-Federation

• Bulk Federation

• Dynamic Identity Provider Proxying

• The Pre-login URL

• Federation API

Using Federation Manager

• Sun Java System Federation Manager 7.0 Release Notes

• Introducing Federation Manager

• Installing and Deploying Federation Manager

• Getting Started

• System Administration

• Customizing Federation Manager

• Federation Manager 7.0 Java API Reference

Using Access Manager Authentication Web Services

• Authentication Web Service Overview

• Authentication Web Service Process

• Authentication Web Service Attribute

• Authentication Web Service API

• Authentication Web Service Sample

Using Access Manager Data Web Services

• Data Services Overview

• Liberty Personal Profile Service

• Liberty Employee Profile Service

• Data Services Template API

• Developing A New Data Service

Using the Access Manager Discovery Service

• Discovery Service Overview

• Discovery Service Process

• Discovery Service Attributes

• Discovery Entries and Resource Offerings

• Discovery Service APIs

Using the Access Manager SOAP Binding Service

• SOAP Binding Service Overview

• SOAP Binding Process

• SOAP Binding Service Attributes

• SOAP Binding Service Package

Administering SAML

• SAML Overview

• SAML Attributes

• SAML API

Using the SAML v2 Plug-in for Federation Services

• SAML v2 Plug-in for Federation Services Release Notes

• Introducing the SAML v2 Plug-in for Federation Services

• Installing the SAML v2 Plug-in for Federation Services

• Administration for the SAML v2 Plug-in

• Deploying the SAML v2 Plug-in for Federation Services Generated WAR

• SAMLv2 Plug-in for Federation Services Java API Reference

Using the Access Manager Logging Feature

• How the Logging Feature Works

• Error and Access Logs

• Log Files

• Access Manager Service Logs

• Secure Logging

• Command Line Logging

• Logging Properties

• Remote Logging

• Debug Files

• Writing LogRecords To A Log File or Table

• Reading LogRecords From A Log File or Table

• Compiling Logging Programs

• Implementing a Remote Logging Application in a Container

• Logging to a Second Access Manager Server

• Using the Logging SPIs

Using the Client SDK

• How the Client SDK Works

• JDK and CLASSPATH Requirements

• Installing the Client SDK

• Initializing the Client SDK

• Setting Up a Client Identity

Customizing Access Manager

• Building Custom Web Applications

• Customizing Branding and Functionality

• Customizing the Self-Registration Page

• Customizing the Authentication User Interface

• Customizing the Distributed Authentication User Interface

Using Access Manager Code Samples

• Console Samples

• Using the SSO Code Samples

• Running the Sample Authentication Programs

• Using the Policy Code Samples

• Authentication Web Service Sample

• Discovery Service Sample

• Liberty-based and SAML Samples

• Using the Logging Sample Files

• Using the C API Code Samples

Using Access Manager Command Line Utilities

• amadmin

• ampassword

• bak2am

• am2bak

• VerifyArchive

Tuning Access Manager and Components

• Tuning Access Manager and Other Components

• Overview of the Access Manager Tuning Scripts

• Access Manager amtune-env File Parameters

• Directory Server Tuning Parameters

• Directory Server Tuning Scripts

• Tuning Considerations

Reference

• The AMConfig.properties File

• The serverconfig.xml File

• Log File Reference

• Error Codes

• Sun Java System Access Manager 7 2005Q4 Java API Reference

• Access Manager C API Reference

• Federation API

• Authentication Web Service API

• Data Services Template API

• Discovery Service APIs

• SAML API

• Liberty-related Application Programming Interfaces

• Federation Service Schema Files