Documentation Home
> Sun OpenSSO Enterprise Policy Agent 3.0 User's Guide for Web Agents
Sun OpenSSO Enterprise Policy Agent 3.0 User's Guide for Web Agents
Book Information
Index
A
B
C
E
F
G
H
I
J
L
N
O
P
R
S
U
W
Preface
Chapter 1 Introduction to Policy Agent 3.0
Overview of New Features in Policy Agent 3.0
Compatibility and Coexistence of Policy Agent 3.0 with Previous Releases
Compatibility of Policy Agent 3.0 with Access Manager 7.1 and Access Manager 7 2005Q4
Coexistence of Policy Agent 3.0 With Policy Agent 2.2
Chapter 2 Role of Web Agents in the Policy Agent 3.0 Release
Uses of Web Agents
How Web Agents Work
Policy Decision Process for Web Agents
Chapter 3 Vital Installation Information for a Web Agent in Policy Agent 3.0
Unpacking the Distribution Files of an Agent in Policy Agent 3.0
To Unpack the .zip File of an Agent in Policy Agent 3.0
Web Agent Directory Structure in Policy Agent 3.0
Location of the Web Agent Base Directory in Policy Agent 3.0
Inside the Web Agent Base Directory in Policy Agent 3.0
Role of the agentadmin Program in Policy Agent 3.0
agentadmin --install
agentadmin --custom-install
agentadmin --uninstall
agentadmin --listAgents
agentadmin --agentInfo
agentadmin --version
agentadmin --encrypt
agentadmin --getEncryptKey
agentadmin --uninstallAll
agentadmin --migrate
agentadmin --usage
agentadmin --help
Policy Agent 3.0: Web Agent Properties
Web Agent Properties in the OpenSSOAgentBootstrap.properties File
Web Agent Properties Available Using the OpenSSO Enterprise Console or Other Methods
Creating a Web Agent Profile in Policy Agent 3.0
Creating a Web Agent Profile in Policy Agent 3.0
To Create a Web Agent Profile in Policy Agent 3.0 Using OpenSSO Enterprise Console
Creating an Agent Group and Enabling Agents to Inherit Properties From That Group
To Create a New Group
To Enable a Web Agent to Inherit Properties From a Group
About the Agent Authenticator in Policy Agent 3.0
To Create an Agent Authenticator To Access Other Agent Profiles
To Enable the Agent Authenticator to Access Other Agent Instances
Web Agent Task Reference for Policy Agent 3.0
To Navigate in the OpenSSO Enterprise 8.0 Console to the Web Agent Properties
Chapter 4 Common Web Agent Tasks and Features in Policy Agent 3.0
How Web Agent Properties Are Discussed in this Guide
Hot-Swap Mechanism in Web Agents
Web Agent Properties That Are List Constructs
Web Agent Properties That Are Map Constructs
Providing Failover Protection for a Web Agent
Changing the Web Agent Caching Behavior
Cache Updates
Hybrid Cache Updates
Configuring the Not-Enforced URL List
Configuring the Not-Enforced IP Address List
Enforcing Authentication Only
Providing Personalization Capabilities
Providing Personalization With Session Attributes
Providing Personalization With Policy-Based Response Attributes
Providing Personalization With User Profile Attributes Globally
Setting the Fully Qualified Domain Name
Turning Off FQDN Mapping
Resetting Cookies
Configuring CDSSO
Setting the REMOTE_USER Server Variable
Setting Anonymous User
Validating Client IP Addresses
Resetting a Web Agent Profile in Policy Agent 3.0
To Update a Web Agent Profile Password in Policy Agent 3.0
Configuring Web Agent Log Rotation
Enabling Load Balancing
Load Balancer in Front of OpenSSO Enterprise
Load Balancer in Front of the Web Agent
Load Balancers in Front of Both the Web Agent and OpenSSO Enterprise
Composite Advice
Malicious Header Attributes Automatically Cleared by Agents
Appendix A Comparing Web Agents and J2EE Agents in Policy Agent 3.0
An Overview of Policy Agent 3.0
Interaction Between Policy Agent 3.0 and OpenSSO Enterprise Services
A Generalized Example of the Policy Decision Process
Examples of the Policy Decision Process by Agent Type
Policy Decision Process for J2EE Agents
Policy Decision Process for Web Agents
Web Agents and J2EE Agents: Similarities and Differences
Web Agents
J2EE Agents
Agent Filter and Authentication
Agent Realm and Authorization
Key Similarities of the Two Agent Types
Configuration Properties
Policy Agent Log Files
Not-Enforced Lists
Personal Profile Attributes, Session Attributes, and Policy Response Attributes.
Key Differences Between the Two Agent Types
Default Scope of Protection
Modes of Operation
Appendix B Silent Installation and Uninstallation of a Web Agent in Policy Agent 3.0
About Silent Installation and Uninstallation of a Web Agent in Policy Agent 3.0
Generating a State File for a Web Agent Installation
To Generate a State File for a Web Agent Installation
Using a State File for a Web Agent Silent Installation
To Install a Web Agent Using a State File
Generating a State File for a Web Agent Uninstallation
To Generate a State File for a Web Agent Uninstallation
Using a State File for a Web Agent Silent Uninstallation
To Uninstall a Web Agent Using a State File
Appendix C Wildcard Matching in Policy Agent 3.0 Web Agents
The Multi-Level Wildcard: *
The One-Level Wildcard: -*-
Appendix D Using the ssoadm Command-Line Utility With Agents
An ssoadm Command-Line Example Specific to Agents
Listing the Options for an ssoadm Subcommand
Analysis of an ssoadm Subcommand's Usage Information
Agent-Related Subcommands for the ssoadm Command
The ssoadm Command: add-agent-to-grp subcommand
The ssoadm Command: agent-remove-props subcommand
The ssoadm Command: create-agent subcommand
The ssoadm Command: create-agent-grp subcommand
The ssoadm Command: delete-agent-grps subcommand
The ssoadm Command: delete-agents subcommand
The ssoadm Command: list-agent-grp-members subcommand
The ssoadm Command: list-agent-grps subcommand
The ssoadm Command: list-agents subcommand
The ssoadm Command: remove-agent-from-grp subcommand
The ssoadm Command: show-agent subcommand
The ssoadm Command: show-agent-grp subcommand
The ssoadm Command: show-agent-membership subcommand
The ssoadm Command: show-agent-types subcommand
The ssoadm Command: update-agent subcommand
The ssoadm Command: update-agent-grp subcommand
Appendix E Web Agent Error Codes
Error Code List
Appendix F Developing Your Own OpenSSO Enterprise Web Agent
The Web Agent Development Toolkit
© 2010, Oracle Corporation and/or its affiliates