Console Online Help
|
 |
 |
|
 |
 |
Service Accounts
This section includes the following topics:
- Overview of Service Accounts
- Adding a Service Account
- Listing and Locating Service Accounts
- Viewing and Changing Service Account Details
- Deleting a Service Account
Overview of Service Accounts
A service account is an alias resource for a username and password. AquaLogic Service Bus uses service accounts to provide authentication when connecting to a service or server. For example, when configuring FTP transport-level security for a business service, you may need to provide a username and password to authenticate to the FTP server.
Service accounts are used when configuring business services, transport protocols, and proxy services. Before configuring your business and proxy services, you should define your service account. After you define a service account, you can specify the associated username and password to the service account using the Credentials section of the Security Configuration module. To learn more, see Adding a Credential.
For proxy services with a JMS transport protocol, you can select a service account in the JMS service account field to use for a JMS server connection. The proxy services use this username and password to authenticate to the JMS server. You can also select a service account for proxy services with Email and FTP transport protocols. For email, the service account is used to authenticate to the SMTP server; for FTP, the service account is used to authenticate to the FTP server. To learn more, see Adding a Proxy Service.
For business services with a HTTP transport protocol, if you select the Basic Authentication Required field, you must select a service account in the Service Account field. For business services with a HTTPS transport protocol, you must also select a service account in the Service Account field if you select Basic in the Business Service Authentication field. The proxy service uses this username and password to authenticate at the HTTP transport when routing messages to the business services. To learn more, see Adding a Business Service.
Note: Basic authentication over HTTP is strongly discouraged because the password is sent in clear text. However, it is safe to send passwords over HTTPS because HTTPS provides an encrypted channel.
For business services with a JMS transport protocol, you can enter a service account in the JNDI Service Account field to use for JNDI lookups and the JMS Service Account field to use for a JMS server connection. You can also select a service account for business services with Email and FTP transport protocols. For email, the proxy service uses this username and password to authenticate to the SMTP server. For FTP, the proxy service uses this username and password to authenticate to the FTP server. To learn more, see Adding a Business Service.
Note: To learn more about security, see Securing Inbound and Outbound Messages in the BEA AquaLogic Service Bus User Guide.
The following table lists the Service Account pages you can access from the Resource Browser and Project Explorer modules. The tasks and help topics associated with each are provided.
Listing and Locating Service Accounts
The Summary of Service Accounts page enables you to view a list of service accounts. A service account is an alias resource for a username and password. To learn more, see Overview of Service Accounts.
To List and Locate Service Accounts
- From the left navigation pane, select Service Accounts from under Resource Browser. The Summary of Service Accounts page is displayed, which displays the following information for each service account. For a more detailed description of the properties, see Viewing and Changing Service Account Details:
- Filter by service account name. In the Name and Path fields, enter the name and path of the search target, then click Search. The path is the project name and the name of the folder in which the service account resides. The service accounts matching the search criteria are displayed.
- Resort the list. Ascending and descending arrow buttons indicate sortable columns—in this case, the Service Account Name and Path columns. Click the button to change the sort order.
- Scroll through the pages. Use the controls in the lower right corner. Go to a page by selecting the page number or by using the arrow buttons to go to the next, previous, first, or last page.
|
A unique name for the service account. The name is a link to the Service Account Details page. To learn more, see Viewing and Changing Service Account Details. |
|
|
The path is the project name and the name of the folder in which the service account resides. It is a link to the project or folder that contains this resource. To learn more, see Viewing Project Details or Viewing Folder Details. |
|
|
Click the Delete icon to delete a specific service account. To learn more, see Deleting a Service Account. |
Related Topics
Adding a Service Account
The Create a New Service Account page enables you to add a new service account. A service account is an alias resource for a username and password. To learn more, see Overview of Service Accounts.
To Add a Service Account
- If you have not already done so, from the left navigation pane, under Change Center, click Create to create a new session for making changes to the current configuration. To learn more, see Using the Change Center.
- Select the project to which you want to add the service account. You can add a service account directly to the project, or you can add it to a selected folder that resides in the project.
- From the Project View or Folder View page, in the Create Resource field, select Service Account. The Create a New Service Account page is displayed.
- To save the service account, click Save. The service account is created.
The Project View or Folder View page is displayed. The new service account is included in the list of resources.
Note: After you create a Service Account resource, you must go to the Security Configuration
—> Credentials panel in the AquaLogic Service Bus Console and add the username and password. For information about credentials, see Adding a Credential.- To disregard changes, click Cancel.
Note: Click the name of a folder to select it. The Folder View page is displayed.
Note: The new service account is saved in the current session. When you have finished making changes to this configuration, from the left navigation pane, click Activate under Change Center. The session ends and the configuration is deployed to run time. Alternatively, click Discard at any time during the session to delete the changes you have made so far in the current session.
Note: Newly created service accounts within a session are not visible to the Credentials section in the Security Configuration module. Therefore, you cannot associate a new service account with a username and password until you click Activate to commit the session.
Related Topics
Listing and Locating Service Accounts
Viewing and Changing Service Account Details
Viewing and Changing Service Account Details
The Service Account Details page enables you to view and change details of a specific service account. A service account is an alias resource for a username and password. To learn more, see Overview of Service Accounts.
To View and Change Service Account Details
- Locate the service account. To learn more, see Listing and Locating Service Accounts.
- Click the service account name. The Service Account Details page displays the following information:
- If you have not already done so, from the left navigation pane, under Change Center, click Create to create a new session or click Edit to enter an existing session to make changes to the current configuration. To learn more, see Using the Change Center.
- To make a change to the fields, click Edit. See Adding a Service Account for a description of the fields.
|
The number of objects that this service account references. If such references exist, click the link to view a list of the objects. To learn more, see Viewing References. |
|
|
The number of objects that reference this service account. If such references exist, click the link to view a list of the objects. For example, if you selected this service account as the JMS service account in a proxy service with a JMS transport protocol, the proxy service is listed as a reference when you click the link.To learn more, see Viewing References. |
|
Note: The updated service account is saved in the current session. When you have finished making changes to this configuration, from the left navigation pane, click Activate under Change Center. The session ends and the configuration is deployed to run time. Alternatively, click Discard at any time during the session to delete the changes you have made so far in the current session.
Related Topics
Deleting a Service Account
The Summary of Service Accounts page enables you to delete service accounts. A service account is an alias resource for a username and password. To learn more, see Overview of Service Accounts.
Note: You cannot delete a resource if it is referenced by other resources in AquaLogic Service Bus. Instead of the Delete icon, a Delete icon with a red X is displayed for these resources.
Warning: Deleting a service account does not delete the associated username/password credential. You must first delete the username/password credential before deleting the service account.
To Delete a Service Account
- If you have not already done so, from the left navigation pane, under Change Center, click Create to create a new session for making changes to the current configuration. To learn more, see Using the Change Center.
- From the left navigation pane, select Service Accounts from under Resource Browser. The Summary of Service Accounts page is displayed.
- In the Options field of the service account you want to delete, click the Delete icon. The service account is removed from the list.
The service account is deleted in the current session. When you have finished making changes to this configuration, from the left navigation pane, click Activate under Change Center. The session ends and the configuration is deployed to run time. Alternatively, click Discard at any time during the session to delete the changes you have made so far in the current session.
Note: If necessary, you can undo the deletion of this resource. To learn more, see Undoing a Task.
