Sun Java System Access Manager Policy Agent 2.2 Guide for BEA WebLogic Server 9.0/9.1

Configuring the Agent Authentication Provider on Agent for BEA WebLogic Server 9.0/9.1

Using security service provider API exposed by BEA WebLogic Server 9.0/9.1, the agent plugs its custom security Authenticator into the container. Once the Agent Authenticator is configured, all requests call it. You only need to set the Agent Authenticator once per WebLogic domain. For more information on security service provider architecture visit the appropriate site according to your site's respective version of BEA WebLogic Server.

BEA WebLogic Server 9.0:

http://e-docs.bea.com/wls/docs90/dvspisec/intro.html

BEA WebLogic Server 9.1:

http://e-docs.bea.com/wls/docs91/dvspisec/intro.html

The authentication provider can be added by using the BEA WebLogic Server 9.0/9.1 Administration Console. The information provided in this section serves to facilitate the configuration of the Agent Authentication Provider and is in no means a substitute for the information provided in WebLogic Server documentation. For a detailed discussion on WebLogic Authentication providers, see WebLogic Server documentation at http://www.bea.com.

ProcedureTo Configure the Agent Authentication Provider on Agent for BEA WebLogic Server 9.0/9.1

  1. Log on to the BEA WebLogic Server 9.0/9.1 Administration Console.

  2. In the left pane, under Domain Structure and under the host name of the server you are configuring, click “Security realm.”

  3. In the right pane, click the name of the realm you are configuring.

  4. Click the Providers tab.

  5. Click the Authentication tab.

  6. In the left pane, click Lock & Edit.

  7. In the right pane, click New.

  8. Specify Type as AgentAuthenticator.

  9. Specify Name with a name of your choice.

  10. Click OK.

  11. Click the newly created policy agent authentication provider.

  12. Change the control flag value from REQUIRED to OPTIONAL

  13. Click Save.

  14. In the right pane, at the top, click Providers.

    The Authentication Providers Table appears.

  15. Click Default Authenticator.

  16. Change the control flag from REQUIRED to OPTIONAL.

  17. Click Save.

  18. In the left pane, click Activate changes.

The Default Security Realm

If you choose to create a new security realm instead of using the default security realm to configure the agent, ensure that the control flag value for the Agent Authenticator and any additional authentication providers are set to OPTIONAL.