Configuring Single Sign On Authentication

Papi Web Service can use a custom Single Sign On (SSO) implementation to authenticate the client. These following procedures show you how to configure SSO Authentication for PAPI Web Service.

To compile the class containing your custom SSO implementation you need to have a Java SE Development Kit 5 (JDK 5) installed. You can download the JDK from Sun Developer Network.

To configure SSO Authentication for PAPI Web Service:

  1. Implement the interfacefuego.sso.SSOUserLoginInterface.
    1. Add the file fuego.core.jar to the CLASSPATH.
      • In a Studio installation this file resides in BEA_HOME/albpm6.0/studio/lib
      • In an Enterprise installation this file resides in BEA_HOME/albpm6.0/enterprise/webapps/papiws/WEB-INF/lib
    2. Create a Java class that implements the interface fuego.sso.SSOUserLoginInterface. This class should contain your custom SSO implementation.
    3. Compile the class created in the previous step.
  2. Copy the compiled class that contains your SSO implementation to the WEB-INF/lib directory of the PAPI Web Service web application.
    • In a Studio installation this directory is located under: BEA_HOME/albpm6.0/studio/webapps/papiws
    • In an Enterprise installation this directory is located under: BEA_HOME/albpm6.0/enterprise/webapps/papiws
  3. Edit PAPI Web Service configuration and select the SSO option. See Editing PAPI Web Service Configuration.
  4. Enter the fully qualified name of the class containing the SSO implementation.

The next time you start the PAPI Web Service application, SSO authentication is activated.

Parent topic: PAPI Web Service Security Authentication