Sun Java System Access Manager Policy Agent 2.2 Guide for BEA WebLogic Server/Portal 10

Configuring the Agent Filter Modes Applicable to WebLogic Portal 10

The agent filter modes that apply to Agent for WebLogic Server/Portal 10 differ between WebLogic Portal 10 and WebLogic Server 10. The key difference being that SSL_ONLY and URL_POLICY are not applicable to WebLogic Portal 10.


Note –

If you are using WebLogic Portal 10 solely to apply SSO, you cannot use the SSL_ONLY filter mode. The correct mode to use in this scenario is the J2EE_POLICY mode.

Similarly, if you are using the WebLogic Portal 10 to protect URLs, such as portal JSP files, from being accessed directly, you cannot use the URL_POLICY filter mode. The correct mode to use in this scenario is the ALL mode.

These settings might seem counterintuitive, but they are the correct modes given that the SSL_ONLY mode and the URL_POLICY mode are inoperable with WebLogic Portal 10.


The following task describes how to set the appropriate properties in the J2EE agent AMAgent.properties configuration file. The instructions that follow describe how to set the filter mode to J2EE_POLICY mode and ALL mode. The instructions do not include information about setting the filter mode to none, which is set in the same manner for both WebLogic Portal 10 and WebLogic Server 10 as described in J2EE Agent Filter Modes.

ProcedureTo Configure Agent Filter Modes Applicable to WebLogic Portal 10

  1. Using the text editor of your choice, access the J2EE agent AMAgent.properties configuration file.

    The following path serves as an example of the path to the J2EE agent AMAgent.properties configuration file:


    PolicyAgent-base/Agent_001/AMAgent.properties
    
  2. Edit the filter mode to match your site's requirements.

    Therefore, edit the following property:

    com.sun.identity.agents.config.filter.mode

    The following alternatives indicate how to set the property to J2EE_POLICY or All.

    • To set the value of the property to J2EE_POLICY.

      com.sun.identity.agents.config.filter.mode = J2EE_POLICY

      This setting is appropriate if your site is using the WebLogic Portal 10 instance solely for enabling SSO.

    • To set the value of the property to All.

      This setting is appropriate if the WebLogic Portal 10 instance is to be protected by an Access Manager policy.

      com.sun.identity.agents.config.filter.mode = ALL

      Note –

      When creating an Access Manager policy to protect the WebLogic Portal 10 instance, define the policy to give permission to only public portal URLs, such as the following:

      http://agentHost.example.com:7041/groupspace/
      http://agentHost.example.com:7041/groupspace/groupspace.jsp

Next Steps

Since forthcoming tasks require you to configure the J2EE agent AMAgent.properties configuration file, you can keep the file open at this time.