Configuring Authentication Modules

Before defining an authentication process, instances of the authentication modules to be used in the process must be added in the appropriate realm. Before adding an authentication module instance to a realm, default global values can be defined which will then be carried over to any instance created from the module. Once the module instance is added to the realm, you can modify the values specifically for that realm. See Authentication Modules for information about each authentication module.

• To Define Global Values for an Authentication Module

• To Add an Authentication Module Instance to a Realm or Sub Realm

To Define Global Values for an Authentication Module

1. Log in to the OpenSSO Enterprise console as the administrator.

   By default, amadmin.

2. Click the Configuration tab.

3. Under Authentication, select the module you want to modify.

4. Modify the values for the appropriate properties and click Save.

   The default values defined globally will be assigned per realm or sub realm when the authentication module is added. See To Add an Authentication Module Instance to a Realm or Sub Realm.

To Add an Authentication Module Instance to a Realm or Sub Realm

Authentication module instances can be expressly accessed for authentication (outside of an authentication chain) by using the module authentication type. See Module Authentication for more information.

1. Log in to the OpenSSO Enterprise console as the administrator.

   By default, amadmin.

2. Click the Access Control tab.

3. Click the name of the realm under which you are adding an authentication module instance.

4. Select the Authentication tab.

5. Click New under Module Instances.

6. Enter a Name for the module instance.

   The name must be unique.

7. Select the Type of authentication module.

8. Click OK.

9. Click the name of the new instance to edit the properties for this realm.

   See Authentication in Sun OpenSSO Enterprise 8.0 Administration Reference, or click Help for definitions of the properties.

10. Click Save.

    Repeat these steps to add multiple authentication module instances.