The realm=realm-name parameter allows a member of a realm to authenticate using the authentication process configured for that particular realm (or sub realm). A user who is not already a member of the realm will receive an error message when they attempt to authenticate using the realm parameter. Realm authentication is the default authentication type for OpenSSO Enterprise.
http://OpenSSO-machine-name.domain:port/opensso/UI/Login?realm=sun |
A user profile can be dynamically created in the realm's configured user data store if all of the following are TRUE:
The User Profile attribute in the Core Authentication module must be set to Dynamic or Dynamic with User Alias. See To Modify Core Authentication Properties By Realm.
The user must successfully authenticate to the required module or authentication chain.
The user does not already have a profile in the user data store.
If there is a value for this parameter, the correct login page (based on the realm name and locale setting) will be displayed. If this parameter is not set, the login page for the default top level realm is displayed. For more information, see Realm Authentication.