Sun Java System Access Manager Policy Agent 2.2 Guide for BEA WebLogic Server/Portal 9.2

Configuring the Agent Filter Modes Applicable to BEA WebLogic Portal 9.2

The agent filter modes that apply to Agent for BEA WebLogic Server/Portal 9.2 differ between BEA WebLogic Portal 9.2 and BEA WebLogic Server 9.2. The key difference being that SSL_ONLY and URL_POLICY are not applicable to BEA WebLogic Portal 9.2.


Note –

If you are using BEA WebLogic Portal 9.2 solely to apply SSO, you cannot use the SSL_ONLY filter mode. The correct mode to use in this scenario is the J2EE_POLICY mode.

Similarly, if you are using the BEA WebLogic Portal 9.2 to protect URLs, such as portal JSP files, from being accessed directly, you cannot use the URL_POLICY filter mode. The correct mode to use in this scenario is the ALL mode.

These settings might seem counterintuitive, but they are the correct modes given that the SSL_ONLY mode and the URL_POLICY mode are inoperable with BEA WebLogic Portal 9.2.


The following task describes how to set the appropriate properties in the J2EE agent AMAgent.properties configuration file. The instructions that follow describe how to set the filter mode to J2EE_POLICY mode and ALL mode. The instructions do not include information about setting the filter mode to none, which is set in the same manner for both BEA WebLogic Portal 9.2 and BEA WebLogic Server 9.2 as described in J2EE Agent Filter Modes.

ProcedureTo Configure Agent Filter Modes Applicable to BEA WebLogic Portal 9.2

  1. Using the text editor of your choice, access the J2EE agent AMAgent.properties configuration file.

    The following path serves as an example of the path to the J2EE agent AMAgent.properties configuration file:


    PolicyAgent-base/agent_001/AMAgent.properties
    
  2. Edit the filter mode to match your site's requirements.

    Therefore, edit the following property:

    com.sun.identity.agents.config.filter.mode

    The following alternatives indicate how to set the property to J2EE_POLICY or All.

    • To set the value of the property to J2EE_POLICY.

      com.sun.identity.agents.config.filter.mode = J2EE_POLICY

      This setting is appropriate if your site is using the BEA WebLogic Portal 9.2 instance solely for enabling SSO.

    • To set the value of the property to All.

      This setting is appropriate if the BEA WebLogic Portal 9.2 instance is to be protected by an Access Manager policy.

      com.sun.identity.agents.config.filter.mode = ALL

      Note –

      When creating an Access Manager policy to protect the BEA WebLogic Portal 9.2 instance, define the policy to give permission to only public portal URLs, such as the following:

      http://agentHost.example.com:7041/groupspace/
      http://agentHost.example.com:7041/groupspace/groupspace.jsp

Next Steps

Since forthcoming tasks require you to configure the J2EE agent AMAgent.properties configuration file, you can keep the file open at this time.