OpenSSO Enterprise Session Failover Components

A OpenSSO Enterprise session failover deployment scenario includes these components:

• Two or more OpenSSO Enterprise instances running on different host servers and configured as a site.

  To configure the OpenSSO Enterprise instances as a site, use one of these methods:

  • When you run the Configurator for the OpenSSO Enterprise instances, specify the same Site Name and load balancer Primary URL on the Site Configuration page for each instance. For information, see Configuring OpenSSO Enterprise With a Custom Configuration.

    or

  • If you did not configure the deployment as a site when you ran the Configurator, use either the Administrator Console or the ssoadm command-line utility to configure the OpenSSO Enterprise instances as a site.

• Load balancer for the OpenSSO Enterprise instances.

• Message Queue brokers, running in cluster mode on different servers.

• Oracle Berkeley DB client (amsessiondb) and database, running on the same servers as the Message Queue brokers.

  OpenSSO Enterprise uses the Oracle Berkeley DB Java Edition as the session data store. For information see http://www.oracle.com/database/berkeley-db/je/index.html.

• Client requests, which can originate from a Web browser, C or Java application using the OpenSSO Enterprise SDK, or a J2EE or web policy agent.

• OpenSSO Enterprise configuration data store (not shown in the figure):

  • Sun Java System Directory Server: All OpenSSO Enterprise instances must access the same Directory Server.

    or

  • OpenSSO data store: Instances must be configured for replication and act as a single directory server.

  The configuration data store must be running and accessible in the deployment.

• OpenSSO Enterprise user data store (not shown in the figure):

  • Sun Java System Directory Server

  • Microsoft Active Directory

  • IBM Tivoli Directory Server

  Note: The OpenSSO user data store is recommended only for prototype, proof of concept (POC), or developer deployments that have a small number of users. It is not recommended for production deployments.

The following figure shows a session failover deployment with three OpenSSO Enterprise instances. (The OpenSSO Enterprise configuration data store and user data store are not shown.)

Figure 8–1 OpenSSO Enterprise Session Failover Components