Before You Begin

• Before following the instructions in this chapter, an OpenSSO Enterprise 8.0 Update 1 server must be already installed and configured on a supported web container.

• Creating a user data store using the OpenSSO Configurator is not supported in OpenSSO Enterprise 8.0 Update 1.

• Static groups with the member and uniquemember attributes have been tested and work as designed.

  If you use these attributes, then you must add the groupOfNames object class to the User Data Store Configuration page.

• Testing is in progress for groups with other (virtual) attributes such as member, memberof, and ismemberof.

• The Referential Integrity plug-in must be enabled in the OpenDS.

  The Referential Integrity plug-in ensures that when the groups are removed from the directory, all references in the users' entries are removed automatically. If the Referential Integrity plug-in is not enabled, you will see deleted groups displayed the users' profiles even after the group has been removed from the directory server.

When configuring OpenDS as a user store, keep the following in mind:

• OpenSSO Enterprise doesn't support the extensive password policy features provided by OpenDS.

• Only static groups are supported from the OpenSSO console for now.

To use OpenDS as the OpenSSO user data store, complete these steps. Detailed instructions are provided in the following sections.

1. Download and install OpenDS.

2. Add the OpenSSO schema and supporting OpenDS user management data to OpenDS..

3. Configure OpenSSO to Use OpenDS as the User Data Store.