Sun GlassFish Web Space Server 10.0 OpenSSO Add-On Guide

Default Mapping Tables

This section provides reference tables that list the default mappings used by the OpenSSO Add-On. In most cases, you will not need to refer to these tables because the Community Mapper Portlet provided by the OpenSSO Add-On uses these mappings in mostly automatic ways.

Primary Entity Mappings

Table 2–1 lists the primary entity mappings between OpenSSO and Web Space Server.

Table 2–1 Entity Mappings Between OpenSSO (SSO) and Web Space Server (WSS)


SSO Entity	WSS Entity	Comments
Realm	Org	Org is the “Regular” type of `org` in Web Space Server. Users inherit permissions/roles from the Organization and Location to which they belong.
User	User
(Static) Role	Community	Map to a private community. Users can belong to any number of Communities and inherit permissions/roles from them.
Filtered Role	Community	Map to a private community.
Group	Community	Map to a private community.
N/A	Locations	This is another type of `org` in Web Space Server. An Organization to which a User belongs must be the parent of the Location to which that User belongs.
N/A	User Groups	User Groups are arbitrary collections of Users. Users can belong to any number of User Groups, and can inherit permissions/roles from User Groups. This is a grouping of users that can be used for bulk operations in Web Space Server.
N/A	Role	Roles in Web Space Server are containers for permissions.

Default User Attribute Mappings

Table 2–2 lists the user attribute mappings use to import OpenSSO (SSO) user accounts into Web Space Server (WSS). These default mappings can be changed prior to installing the OpenSSO Add-On by modifying the portal-ext.properties file, located in the webspace_dir/webspace/opensso/templates/ directory.

Table 2–2 Default User Attribute Mappings


WSS Attribute	SSO Attribute
`firstName`	`cn`
`lastName`	`sn`
`screenName`	`givenName`
`emailAddress`	`mail`