|
Siebel Security Guide > Web Single Sign-On Authentication > Process of Implementing Windows Integrated Authentication >
Setting Web Single Sign-On Authentication Parameters in the SWSE Configuration File
To implement Web Single Sign-On authentication, you must specify values for parameters in the SWSE configuration file, eapps.cfg, as indicted in this topic. This task is a step in Process of Implementing Windows Integrated Authentication. Provide parameter values in the eapps.cfg file, as indicated by the guidelines in Table 18. For information about editing eapps.cfg parameters and about the purposes of the parameters, see About Parameters in the eapps.cfg File.
Table 18. Parameter Values in eapps.cfg File
|
|
|
[defaults] |
Various |
The values of the parameters in this section are overridden by the parameter values you set in the sections for individual applications. For this scenario, set Web SSO and related parameters in application-specific sections. |
The section particular to your application, such as one of these: [/eservice_enu] [/callcenter_enu] where _enu is the language code for U.S. English. |
AnonUserName |
Enter the user ID of the seed data user record provided for the application that you implement or of the user record you create for the anonymous user. This entry also matches the sAMAccountName entry for the anonymous user record in the directory. For example, enter GUESTCST for Siebel eService. |
AnonPassword |
Enter the password you created in the directory for the anonymous user. NOTE: Typically, password encryption applies to the eapps.cfg file. In this case, you must specify the encrypted password. See Encrypted Passwords in the eapps.cfg File.
|
SingleSignOn |
Enter TRUE to implement Web SSO. |
TrustToken |
Enter HELLO, or a contiguous string of your choice. In Web SSO mode when used with a custom security adapter, the specified value is passed as the password parameter to a custom security adapter if the value corresponds to the value of the Trust Token parameter defined for the custom security adapter. NOTE: Typically, password encryption applies to the eapps.cfg file. In this case, you must specify the encrypted value. See Encrypted Passwords in the eapps.cfg File.
|
|
UserSpec |
Example entry: REMOTE_USER REMOTE_USER is the default Web server variable in which the user's identity key is placed for retrieval by the authentication manager. For additional information, see Configuring the User Specification Source.
|
UserSpecSource |
Example entry: Server |
ProtectedVirtualDirectory |
If you created a protected virtual directory, as described in (Optional) Creating Protected Virtual Directories, enter the name of the directory. Alternatively, if anonymous browsing is not implemented, you can enter the name of the existing virtual directory created for your Siebel application. NOTE: It is recommended that this parameter is always used in a Web SSO implementation.
|
[swe] |
Integrated
DomainAuth |
Set to TRUE for Windows Integrated Authentication. This parameter is set to FALSE by default. |
|
