test

Sun Java System Access Manager Policy Agent 2.2 Guide for SAP Enterprise Portal 7.0 and Web Application Server 7.0

Post-Installation Steps Specific to Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0

Once you have installed Policy Agent 2.2 for SAP Enterprise Portal 7.0/Web Application Server 7.0 and you have performed the post-installation steps that apply to all J2EE agents in the Policy Agent 2.2 release, complete the tasks in this section that apply to your site's deployment. This section contains the following subsections:

Perform the applicable tasks depending upon which deployment container you are configuring.

Post-Installation of Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0: Both Deployment Containers

The tasks in this section apply to both of the deployment containers supported by Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0: SAP Enterprise Portal 7.0 and SAP Web Application Server 7.0.

ProcedureTo Deploy the Agent Software Delivery Archive for SAP Enterprise Portal 7.0/Web Application Server 7.0

This post-installation task is required with Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0, regardless of which deployment container the agent is deployed on: SAP Enterprise Portal 7.0 or SAP Web Application Server 7.0.

Before You Begin

The following file is the Software Delivery Archive for this agent: AMSAPAgent2.2.sda.

For this task, you must provide the full path name to this Software Delivery Archive, as such:

PolicyAgent-base/etc/AmSAPAgent2.2.sda

Therefore, locate this file and record the full path name for use as part of the task.

  1. (Conditional) If the SAP Enterprise Portal 7.0/Web Application Server 7.0 is not running, start it now.

  2. Start the Software DeploymentManager (SDM) Remote GUI.

    The following example provides the path to the SDMRemote GUI on UNIX based systems:

    /usr/sap/SID/instanceName/SDM/program/RemoteGui.sh
    SID

    represents the SAP system ID.

    instanceName

    represents the SAP Enterprise Portal 7.0 instance.

  3. Navigate to the login screen by selecting these options: Menu SDMGui > Login.

  4. Log in as the appropriate user as follows:

    • J2EE Standalone:

      Log in as Administrator.

    • ABAP + J2EE

      Log in as j2ee_admin.

    The SAP Software Deployment Manager (SDM) Graphical User Interface (GUI) appears. For a graphical representation of the SDM as it pertains to this task, see Figure 4–1.

  5. Select the Deployment tab.

  6. Click the plus sign button.

  7. Browse to the following file:

    PolicyAgent-base/etc/AmSAPAgent2.2.sda

  8. Click Next until you reach the Start Deployment button.

    On successful deployment, “Overall Deployment progress” is shown as 100%.

  9. Click Confirm.

  10. Close the SAP Deployment Manager (SDM) application.

    You can close this application by selecting the following options: Menu Deployment > Exit.

    Figure 4–1 SAP Software Deployment Manager (SDM) GUI: Deploying the Agent Software Delivery Archive

    This screenshot of the SAP Software Deployment Manager (SDM) was taken during deployment of the Agent Software Delivery Archive.

ProcedureTo Make a Class Loader Reference to the Login Module for SAP Enterprise Portal 7.0/Web Application Server 7.0

This post-installation task is required with Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0, regardless of which deployment container the agent is deployed on: SAP Enterprise Portal 7.0 or SAP Web Application Server 7.0.

  1. (Conditional) If SAP Enterprise Portal 7.0/Web Application Server 7.0 is not running, start it now.

  2. Start the Visual Administration tool.

    The following example provides the path to the Visual Administration tool on UNIX systems:

    /usr/sap/SID/instanceName/j2ee/admin/go
    SID

    represents the SAP system ID.

    instanceName

    represents the SAP Enterprise Portal 7.0 instance.

  3. Log in to the Visual Administration tool.

    For a graphical representation of the Visual Administration tool as described in the steps that follow in this task, see Figure 4–2.

  4. Select the Security Provider service.

  5. Switch to the edit mode by clicking the pencil icon in the far left corner of the right panel.

  6. Select the Properties tab.

  7. For the value of the LoginModuleClassLoaders property, enter the following:

    library:AmSAPAgent2.2

    If multiple entries are required in this field, separate the entries by commas.

    Figure 4–2 SAP Visual Administrator: Making a Class Loader Reference

    Screenshot of SAP Visual Administrator making a class loader reference to the login module of SAP Enterprise Portal 7.0/Web Application Server 7.0.

ProcedureTo Modify the SAP Enterprise Portal 7.0/Web Application Server 7.0 Class Path

This post-installation task is required with Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0, regardless of which deployment container the agent is deployed on: SAP Enterprise Portal 7.0 or SAP Web Application Server 7.0.

This task description explains how to modify the SAP Enterprise Portal 7.0/Web Application Server 7.0 class path by adding a locale directory and a config directory.

  1. Start the J2EE Engine configuration tool.

    The following example provides the path to the configuration tool on UNIX systems:

    /usr/sap/SID/instanceName/j2ee/configtool/configtool.sh
    SID

    represents the SAP system ID.

    instanceName

    represents the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance.

  2. Log in to the configuration tool.

    For a graphical representation of the configuration tool as described in the steps that follow in this task, see Figure 4–2.

  3. Highlight the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance server (SID).

  4. In the right panel, in the Classpath text field, add the locale directory and the config directory to the end of the class path as follows:

    ;PolicyAgent-base/locale;PolicyAgent-base/AgentInstance-Dir/config

    To simplify this step, you might want to access the agentclasspath.txt file within the config directory of the current agent instance. This file contains the exact class path that you must append to the class path of the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance.

    Figure 4–3 SAP Config Tool: Modifying the SAP Enterprise Portal 7.0/Web Application Server 7.0 Class Path

    This screenshot illustrates the use of the SAP Config Tool to modify the SAP Enterprise Portal 7.0/Web Application Server 7.0 class path.

ProcedureTo Modify the SAP Enterprise Portal 7.0/Web Application Server 7.0 JVM Options (AIX Systems Only)

This task is specific to AIX systems and is necessary because AIX systems come with an IBM JDK which does not come with the Sun Microsystems JCE provider.

  1. Start the J2EE Engine configuration tool.

    The following example provides the path to the configuration tool on UNIX systems:

    /usr/sap/SID/instanceName/j2ee/configtool/configtool.sh
    SID

    represents the SAP system ID.

    instanceName

    represents the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance.

  2. Log in to the configuration tool.

  3. Highlight the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance server (SID).

  4. In the right panel, in the Java Parameters field, add the following lines:


    -DamKeyGenDescriptor.provider=IBMJCE
    		 

    -DamCryptoDescriptor.provider=IBMJCE

ProcedureTo Deploy the agentapp.war file for SAP Enterprise Portal 7.0/Web Application Server 7.0

This post-installation task is required with Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0, regardless of which deployment container the agent is deployed on: SAP Enterprise Portal 7.0 or SAP Web Application Server 7.0.

  1. Start the J2EE engine deploy tool by issuing the following command:

    /usr/sap/SID/instanceName/j2ee.deploying/DeployTool
    SID

    represents the SAP system ID.

    instanceName

    represents the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance.

    Caution – Caution –

    Create a subdirectory for the agent application in DeployContainer-base. In this scenario, DeployContainer-base represents the directory within which the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance was installed. Creating a subdirectory ensures that no other directories are affected by the agent application. If you undeploy the agentapp.war file without creating this subdirectory, DeployTool removes other critical content in the DeployContainer-base directory.

  2. Create a new project.

    You can create a new project by selecting the following options: Menu > Project > New Project.

    A dialog box appears.

  3. Browse to an empty directory owned by SAP Instance user (j2eadm).

  4. Enter agentapp for the address field.

  5. Click OK.

  6. Select the Assembler tab.

  7. Right click the agentapp node to select Add Archive from the context menu.

    See the following figure for a visual reference.

    Figure 4–4 SAP J2EE Engine Deploy Tool: agentapp Deployment, Add Archive

    This screenshot illustrates the use of the SAP J2EE Engine Deploy Tool to add agentapp.

  8. Browse to the PolicyAgent-base/etc directory to select agentapp.war.

  9. Save the Project.

    You can save the project by selecting the following options: Menu > Project > Save.

  10. Browse to the directory specified previously in this task as owned by SAP Instance user (j2eadm).

  11. Enter agentapp for the address field.

  12. Click OK.

  13. Right click the agentapp root node to select Make Ear from the context menu.

    See the following figure for a visual reference.

    Figure 4–5 SAP J2EE Engine Deploy Tool: agentapp Deployment, Make Ear

    This screenshot illustrates the use of the SAP J2EE Engine Deploy Tool to make Ear.

  14. Select the Deployer tab.

  15. Connect to SAP Enterprise Portal 7.0/Web Application Server 7.0

    You can connect to SAP Enterprise Portal 7.0/Web Application Server 7.0 by selecting the following options: Menu >Deploy >Connect.

  16. Log in as the appropriate user as follows:

    • J2EE Standalone:

      Log in as Administrator.

    • ABAP + J2EE

      Log in as j2ee_admin.

  17. Deploy agentapp.

    You can deploy the agentapp by selecting the following options: Menu > Deploy > Deployment >Deploy Ear.

    See the following figure for a visual reference.

    Figure 4–6 SAP J2EE Engine Deploy Tool: Deploying agentapp

    This screenshot illustrates the use of the SAP J2EE Engine Deploy Tool to deploy agentapp.

    A prompt appears to start the deployed application.

  18. Select Yes.

ProcedureTo Add a Reference From sap.com/agentapp to the New AmSAPAgent2.2 Library for SAP Enterprise Portal 7.0/Web Application Server 7.0

This post-installation task is required with Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0, regardless of which deployment container the agent is deployed on: SAP Enterprise Portal 7.0 or SAP Web Application Server 7.0.

This task description explains how to add a library reference from the sap.com/agentapp application to the newly deployed AmSAPAgent2.2 library.

Use the command line for this task.

  1. Telnet to the J2EE telnet port by issuing a command such as the following:

    $ telnet j2ee-engine-host instance-telnet-port

    j2ee-engine-host

    represents the machine that hosts the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance.

    instance-telnet-port

    represents the port number of the telnet administration service of the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance.

    The following example demonstrates the format of the telnet command to issue:


    telnet saphost.example.com 50008

    For a graphical representation of telnet administration as described in the steps that follow in this task, see the following figure.

    Figure 4–7 SAP J2EE Telnet Administration: Adding the Agent Library Reference to agentapp

    This screenshot illustrates the use of telnet administration with SAP J2EE Engine v7.00 for adding the Agent library reference to agentapp.

  2. Log in using Administrator as the user and the corresponding Administrator password.

  3. Issue the following command:

    $ jump 0

    A message such as the following appears:

    You jumped on node 4503950.

  4. Issue the following command:

    $ add deploy

  5. Issue the following command:

    $ CHANGE_REF -m sap.com/agentapp library:AmSAPAgent2.2

    The following message appears:

    The reference between application sap.com/agentapp and 
library:AmSAPAgent2.2 was made!

  6. Stop and start the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance.

Post-Installation of Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0: SAP Enterprise Portal 7.0

Perform the tasks in this section if you are configuring Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 on SAP Enterprise Portal 7.0. This section includes a variety of short configuration tasks that are required for the agent to work on this specific deployment container. Complete all the tasks described in this section before performing the applicable tasks described in Conditional Post-Installation Steps for J2EE Agents in Policy Agent 2.2.

ProcedureTo Add a Reference From sap.com/irj to the New AmSAPAgent2.2 Library for SAP Enterprise Portal 7.0

This is one of the post-installation tasks required when Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 has been installed on SAP Enterprise Portal 7.0.

This task description explains how to add a library reference from the sap.com/irj application to the newly deployed AmSAPAgent2.2 library.

Use the command line for this task.

  1. Telnet to the J2EE telnet port by issuing a command such as the following:

    $ telnet j2ee-engine-host instance-telnet-port

    j2ee-engine-host

    represents the machine that hosts the SAP Enterprise Portal 7.0 instance.

    instance-telnet-port

    represents the port number of the telnet administration service of the SAP Enterprise Portal 7.0 instance.

    The following example demonstrates the format of the telnet command to issue:


    telnet saphost.example.com 50008

    For a graphical representation of telnet administration as described in the steps that follow in this task, see the following figure.

    Figure 4–8 SAP J2EE Telnet Administration: Adding the Agent Library reference to SAP Enterprise Portal 7.0

    This screenshot illustrates use of telnet administration with SAP J2EE Engine v7.00 to add the agent library reference to SAP Enterprise Portal 7.0.

  2. Log in using Administrator as the user and the corresponding Administrator password.

  3. Issue the following command:

    $ jump 0

    A message such as the following appears:

    You jumped on node 4503950

  4. Issue the following command:

    $ add deploy

  5. Issue the following command:

    $ CHANGE_REF -m sap.com/irj library:AmSAPAgent2.2

    The following message appears:

    The reference between application sap.com/irj and 
library:AmSAPAgent2.2 was made!

  6. Stop and start the SAP Enterprise Portal 7.0 instance.

ProcedureTo Provide Access to the New Login Module for SAP Enterprise Portal 7.0

This is one of the post-installation tasks required when Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 has been installed on SAP Enterprise Portal 7.0.

This task description explains how to add the new login module to the J2EE engine list of login modules.

  1. (Conditional) If the SAP Enterprise Portal 7.0 is not running, start it now.

  2. Start the Visual Administration tool.

    The following example provides the path to the Visual Administration tool on UNIX systems:

    /usr/sap/SID/instanceName/j2ee/admin/go
    SID

    represents the SAP system ID.

    instanceName

    represents the SAP Enterprise Portal 7.0 instance.

  3. Log in to the Visual Administration tool.

    For a graphical representation of the Visual Administration tool as described in the steps that follow in this task, see Figure 4–9.

  4. Select the Security Provider service.

  5. Select the User Management tab.

  6. Switch to the edit mode by clicking the pencil icon in the far left corner of the right panel.

  7. Click Manage Security Stores.

  8. Click Add Login Module.

    A dialog box appears.

  9. Click OK.

  10. In the Class Name text field, enter the following:

    com.sun.identity.agents.sap.v70.AmSAPEP70LoginModule

  11. In the Display Name text field, enter the following:

    AmSAPEP70LoginModule

  12. Click OK.

    Figure 4–9 SAP Visual Administrator: Adding a New Login Module

    This screenshot illustrates the use of the SAP Visual Administrator to provide access to the new login module.

ProcedureTo Modify the Ticket Template to Use the New Login Module for SAP Enterprise Portal 7.0

This is one of the post-installation tasks required when Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 has been installed on SAP Enterprise Portal 7.0.

This task description explains how to modify the ticket template in order to list the new login module that you just added to the J2EE engine list of login modules.

Before You Begin

If necessary, start and log in to the Visual Administration tool as detailed in the preceding task description.

For a graphical representation of the Visual Administration tool as described in the steps in this task, see Figure 4–10.

  1. Select the Security Provider service.

  2. Select the Policy Configurations tab.

  3. Switch to the edit mode by clicking the pencil icon in the far left corner of the right panel.

  4. In the Components list, select the ticket authentication template.

  5. Delete all login modules, except for the following:

    com.sap.security.core.server.jaas.EvaluteTicketLoginModule
com.sap.security.core.server.jaas.CreateTicketLoginModule

  6. Click Add New.

  7. From the list of modules, select AmSAPEP70LoginModule.

  8. Click Modify.

  9. Move AmSAPEP70LoginModule between the following two remaining login modules:

    com.sap.security.core.server.jaas.EvaluteTicketLoginModule
com.sap.security.core.server.jaas.CreateTicketLoginModule

    The new ticket authentication template appears as such:

    EvaluateTicketLoginModule

    SUFFICIENT

    AmSAPEP70LoginModule

    REQUISITE

    CreateTicketLoginModule

    OPTIONAL

    Caution – Caution –

    Ensure that the ticket authentication template resembles the preceding list in that it follows the same sequence (EvaluateTicketLoginModule, AmSAPEP70LoginModule, and CreateTicketLoginModule) with the same values (SUFFICIENT, REQUISITE, and OPTIONAL).

    Figure 4–10 SAP Visual Administrator: Modifying the Ticket Template

    This screenshot illustrates the use of the SAP Visual Administrator to modify the ticket template.

Next Steps

Save the ticket authentication template configuration.

ProcedureTo Configure the ume.logoff.redirect.url Parameter for SAP Enterprise Portal 7.0

This is one of the post-installation tasks required when Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 has been installed on SAP Enterprise Portal 7.0.

  1. Start the J2EE Engine configuration tool.

    The following example provides the path to the configuration tool on UNIX systems:

    /usr/sap/SID/instanceName/j2ee/configtool/configtool.sh
    SID

    represents the SAP system ID.

    instanceName

    represents the SAP Enterprise Portal 7.0 instance.

    For a graphical representation of the configuration tool as described in the steps that follow in this task, see Figure 4–11.

  2. Click the pencil icon to switch to the configuration editor mode.

  3. Click the pencil and glasses icon.

  4. Select cluster_data -> server -> cfg -> services.

    The UME service property sheet appears.

  5. Double click the following property sheet: com.sap.security.core.ume.service

  6. Add the following custom value to the property named ume.logoff.redirect.uri:

    http://AMServices-host:AMServices-port/amserver/UI/Login?arg=newsession

    AMServices-host

    represents the fully qualified host name of the server where Access Manager Services are installed.

    AMServices-port

    represents the port number of the server where Access Manager Services are installed.

    Figure 4–11 SAP Config Tool: Configuring the ume.logoff.redirect.url Parameter

    This screenshot illustrates the use of the SAP Config Tool to configure the ume.logoff.redirect.url parameter.

ProcedureTo Enable Cookie Reset for SAP Enterprise Portal 7.0

This task enables single logout between the Access Manager instance and the SAP Enterprise Portal 7.0 instance. Otherwise, single logout might fail, potentially creating a security risk.

  1. Access the J2EE agent AMAgent.properties configuration file.

  2. Change the following properties as shown:

    • com.sun.identity.agents.config.cookie.reset.enable = true

    • com.sun.identity.agents.config.cookie.reset.name[0] = MYSAPSSO2

    • com.sun.identity.agents.config.cookie.reset.domain[MYSAPSSO2] = EP–DomainName

    where EP–DomainName represents the name of the domain of the machine where the SAP Enterprise Portal 7.0 instance is installed, such as .example.com.

Post-Installation of Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0: SAP Web Application Server 7.0

Perform the tasks in this section if you are configuring Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 on SAP Web Application Server 7.0. This section includes a variety of short configuration tasks that are required for the agent to work on this specific deployment container. Complete all the tasks described in this section before performing the applicable tasks described in Conditional Post-Installation Steps for J2EE Agents in Policy Agent 2.2.

ProcedureTo Install the Agent Filter for the Deployed Application on SAP Web Application Server 7.0

The agent filter can be installed by modifying the deployment descriptor of the application to be protected. The following steps explain how to install the agent filter for the application you want the agent to protect:

  1. To install the agent filter, ensure that the application is not currently deployed on SAP Enterprise Portal 7.0/Web Application Server 7.0.

    If it is currently deployed, remove it before proceeding any further.

  2. Create the necessary backups before proceeding to modify these descriptors.

    Since you will modify the deployment descriptor in the next step, creating backup files at this point is important.

  3. Edit the application's web.xml descriptor as follows:

    1. Set the <DOCTYPE> element as shown in the following code example:


      <!DOCTYPE web-app version="2.4"
 xmlns="http://java.sun.com/xml/ns/j2ee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee 
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

      SAP Enterprise Portal 7.0/Web Application Server 7.0 supports the Java Servlet Specification version 2.4.

      Note that Servlet API version 2.4 is fully backward compatible with version 2.3. Therefore, all existing servlets should work without modification or recompilation.

    2. Edit the application's web.xml descriptor.

      Add the <filter> elements in the deployment descriptor. Do this by specifying the <filter>, <filter-mapping>, and <dispatcher> elements immediately following the description element of the <web-app> element in the descriptor web.xml. The following code example displays a sample web.xml descriptor with the <filter>, <filter-mapping>, and <dispatcher> elements added. 


      <web-app>
..
..	
<filter>
        <filter-name>Agent</filter-name>
        <filter-class> com.sun.identity.agents.filter.AmAgentFilter </filter-class>
    </filter>
    <filter-mapping>
        <filter-name>Agent</filter-name>
        <url-pattern>/*</url-pattern>
        <dispatcher>REQUEST</dispatcher>
        <dispatcher>INCLUDE</dispatcher>
        <dispatcher>FORWARD</dispatcher>
        <dispatcher>ERROR</dispatcher>
    </filter-mapping>
..
..
</web-app>

    If you want to protect your application with J2EE declarative security, refer to the PolicyAgentBase/sampleapp directory to learn how to build and deploy an application. The sampleapp directory is by no means a full fledged J2EE application. Rather it is a simple application that provides you with a quick reference to application specific deployment descriptors and various deployment modes of a J2EE agent. Once you successfully deploy sampleapp and test all of its features, you can use it as a reference to other applications that will be protected by the J2EE agent.

    Once the web.xml deployment descriptor is modified to reflect the new <DOCTYPE> and <filter> elements, the agent filter is added to the application. You can now redeploy your application on SAP Enterprise Portal 7.0/Web Application Server 7.0.

    Note –

    Ensure that role-to-principal mappings in container specific deployment descriptors are replaced with Access Manager roles or principals. You can retrieve Access Manager roles or principals for Access Manager 7 by issuing the agentadmin --getUuid command. For more information on the agentadmin --getUuid command, see agentadmin --getUuid.

    You can also retrieve the universal ID for the user (UUID) using Access Manager 7 Console to browse the user profile.

ProcedureTo Add a Reference From Protected Application to the New AmSAPAgent2.2 Library for SAP Web Application Server 7.0

This is one of the post-installation tasks required when Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 has been installed on SAP Web Application Server 7.0.

This task description explains how to add a library reference from the sap.com/app-context application to the newly deployed AmSAPAgent2.2 library.

Use the command line for this task.

  1. Telnet to the J2EE telnet port by issuing a command such as the following:

    $ telnet j2ee-engine-host instance-telnet-port

    j2ee-engine-host

    represents the machine that hosts the SAP Web Application Server 7.0 instance.

    instance-telnet-port

    represents the port number of the telnet administration service of the SAP Enterprise Portal 7.0/Web Application Server 7.0 instance.

    The following example demonstrates the format of the telnet command to issue:


    telnet saphost.example.com 50008

    After you issue a command similar to the preceding command, a message such as the following appears:

    Telnet Administration 
        [SAP J2EE Engine]

        Login:
        Password:

  2. Log in using Administrator as the user and the corresponding Administrator password.

  3. Issue the following command:

    $ jump 0

    A message such as the following appears:

    You jumped on node 56457550

  4. Issue the following command:

    $ add deploy

  5. Issue the following command:

    $ CHANGE_REF -m sap.com/app-context library:AmSAPAgent2.2

    The following message appears:

    The reference between application sap.com/app-context and 
library:AmSAPAgent2.2 was made!

ProcedureTo Provide Access to the New Login Module for SAP Web Application Server 7.0

This is one of the post-installation tasks required when Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 has been installed on SAP Web Application Server 7.0.

This task description explains how to add the new login module to the J2EE engine list of login modules.

  1. (Conditional) If the SAP Web Application Server 7.0 is not running, start it now.

  2. Start the Visual Administration tool.

    The following example provides the path to the Visual Administration tool on UNIX systems:

    /usr/sap/SID/instanceName/j2ee/admin/go
    SID

    represents the SAP system ID.

    instanceName

    represents the SAP Web Application Server 7.0 instance.

  3. Log in to the Visual Administration tool.

    For a graphical representation of the Visual Administration tool as described in the steps that follow in this task, see Figure 4–12.

  4. Select the Security Provider service.

  5. Select the User Management tab.

  6. Switch to the edit mode by clicking the pencil icon in the far left corner of the right panel.

  7. Click Manage Security Stores

  8. Click Add Login Module.

    A dialog box appears.

  9. Click OK.

  10. In the Class Name text field, enter the following:

    com.sun.identity.agents.sap.v70.AmSAPWASLoginModule

  11. In the Display Name text field, enter the following:

    AmSAPWASLoginModule

  12. Click OK.

    Figure 4–12 SAP Visual Administrator: New Login Module for SAP Web Application Server 7.0

    This screenshot illustrates the use of the SAP Visual Administrator to provide a new login module for SAP Web Application Server 7.0.

ProcedureTo Configure Applications to Use the New Login Module for SAP Web Application Server 7.0

This is one of the post-installation tasks required when Agent for SAP Enterprise Portal 7.0/Web Application Server 7.0 has been installed on SAP Web Application Server 7.0.

This task description explains how to use the new login module that you just added to the J2EE engine list of login modules.

Before You Begin

If necessary, start and log in to the Visual Administration tool as detailed in the preceding task description.

  1. Select the Security Provider service.

  2. Select the User Management tab.

  3. In the Components list, select the application you want to configure.

  4. In the right pane, remove BasicPasswordLoginModule.

    1. Select BasicPasswordLoginModule.

    2. Click Remove

  5. Ensure that no other authentication template is being used at this point.

  6. Click Add New.

  7. From the list of modules, select AmSAPWASLoginModule.

  8. Save the configuration.