Bookshelf Home | Contents | Index | Search | PDF

Security Guide for Siebel eBusiness Applications > Authentication Details > Authentication Options >

Shared Database Account

---

This option can be implemented in the following authentication strategies:

Siebel security adapter authentication
Web SSO

You can configure your external authentication system so that a designated directory entry contains a database account that is shared by many users.

By default, the shared database account option is not implemented, and each user's database account exists in an attribute of that user's record in the directory. Because all externally authenticated users share one or a few database accounts, the same credentials are duplicated many times. If those credentials must be changed, you must edit them for every user. By implementing a shared credential, you can reduce directory administration.

To implement a shared database account

Create a database account to be shared by all users who log into a given Siebel application.
Create a designated entry in the directory, and enter the username and password parameters for the common database account in one of that entry's attributes, such as the dbaccount attribute. You may need to create this attribute.

For information about formatting a directory attribute that contains the database account, see Requirements for Directory.

For each Siebel application that implements this shared database account, set the following parameter values in the application's configuration file. For example, edit the eservice.cfg file for Siebel eService.
In the [adapter_name] section, for example [LDAP]:

CredentialsAttributeType= attribute in which the database account is stored in the directory, such as dbaccount

SharedCredentialsDN= the distinguished name (including quotes) for the designated entry, such as "uid=SHAREDENTRY, ou=People, o=companyname.com"

For information about setting Siebel application configuration file parameters, see Siebel Application Configuration File Parameters.

The shared database account is discussed in a usage context in Deployment Options for Security Adapter Authentication and in Setting Up Security Adapter Authentication: A Scenario.

Bookshelf Home | Contents | Index | Search | PDF