Chapter 28       Platform Attributes


The Platform Attributes are global attributes. The values applied to them are carried across the Sun ONE Identity Server configuration and inherited by every configured organization. (They can not be applied directly to roles or organizations as the goal of global attributes is to customize the Identity Server application.) The Platform Attributes are:

• Server List

• Platform Locale

• Cookie Domains

• Login Service URL

• Logout Service URL

• Available Locales

• Client Char Sets

This attribute stores all available locales configured for the platform. Consider an application that lets the user choose their locale. This application would get this attribute from the platform profile and present the list of locales to the user. The user would choose a locale and the application would set this in the user entry preferredLocale.

Server List

The naming service reads this attribute at initialization time. This list contains the Identity Server session servers in a single Identity Server configuration. For example, if two Identity Servers are installed and should work as one, they must both be included in this list. If the host specified in a request for a service URL is not in this list, the naming service will reject the request. The first value in the list specifies the host name and port of the server specified during installation.At the end of the list, there is a two-byte value that uniquely identifies the server. Each server that is participating in load balancing needs to have a unique identifier. This is also used to shorten the cookie length by mapping the server URL to the server ID. For example:

protocol://<server_domain>:<port>|01

Additional servers can be added using the format protocol://<server_domain>:<port>|01|<instance something>

Platform Locale

The platform locale value is the default language subtype that Identity Server was installed with. The authentication, logging and administration services are administered in the language of this value. The default is en_US. See Table 17-1 for a listing of all supported language subtypes.

Cookie Domains

This is the list of domains that will be returned in the cookie header when setting a cookie to the user's browser during authentication. If empty, no cookie domain will be set. In other words, the Identity Server session cookie will only be forwarded to the Identity Server itself and no other servers in the domain. If SSO is required with other servers in the domain, this attribute must be set with the cookie domain. If you had two interfaces in different domains on one Identity Server then you would need to set both cookie domains in this attribute. If a load balancer is used, the cookie domain must be that of the load balancer's domain, not the servers behind the load balancer. The default value for this field is the domain of the installed Identity Server.

Login Service URL

This field specifies the URL of the login page. The default value for this attribute is /<DEPLOY_URI/UI/Login.

Logout Service URL

This field specifies the URL of the logout page. The default value for this attribute is /DEPLY_URI/UI/Logout.

Available Locales

This attribute stores all available locales configured for the platform. Consider an application that lets the user choose their locale. This application would get this attribute from the platform profile and present the list of locales to the user. The user would choose a locale and the application would set this in the user entry preferredLocale.

Client Char Sets

This attribute specifies the character set for different clients at the platform level. It contains a list of client types and the corresponding character sets. The format is as follows:

clientType|charset

clientType2|charset

For example:

genericHTML|UTF-8