Sun Java System Access Manager Policy Agent 2.2 Guide for BEA WebLogic Server/Portal 8.1 SP4

Configuring the Agent Authentication Provider on Agent for BEA WebLogic Server/Portal 8.1 SP4

Using security service provider API exposed by BEA WebLogic Server/Portal 8.1 SP4, the agent plugs its custom security Authenticator into the container. Once the Agent Authenticator is configured, all requests call it. You only need to set the Agent Authenticator once per WebLogic domain. For more information on security service provider architecture visit http://e-docs.bea.com/wls/docs81/dvspisec/intro.html.

The authentication provider can be added by using the BEA WebLogic Server/Portal 8.1 SP4 Administration Console. The information provided in this section serves to facilitate the configuration of the Agent Authentication Provider and is in no means a substitute for the information provided in WebLogic Server/Portal documentation. For a detailed discussion on WebLogic Authentication providers, see WebLogic Portal documentation at http://www.bea.com.

ProcedureTo Configure the Agent Authentication Provider on Agent for BEA WebLogic Server/Portal 8.1 SP4

  1. Log on to the BEA WebLogic Server/Portal 8.1 SP4 Administration Console.

  2. In the left pane, expand the node with the name of the domain you are configuring.

  3. Expand the Security node.

  4. Expand the Realms node.

    All the available security realms are listed in the Realms table.

  5. Click the myrealm node.

    A new page appears in the right pane.

  6. In the right pane, click the Providers tab.

  7. Click Authentication.

  8. Click Configure a New Agent Authenticator.

  9. Click Create to create a new Agent Authenticator .

  10. Change the control flag value from REQUIRED to OPTIONAL

  11. Click Apply

  12. Click the Agent Providers tab again.

    You should now be able to see an Agent Authenticator.

  13. Click Default Authenticator.

  14. Change the control flag from REQUIRED to OPTIONAL.

  15. Click Apply.

The Default Security Realm

If you choose to create a new security realm instead of using the default security realm to configure the agent, ensure that the control flag value for the Agent Authenticator and any additional authentication providers are set to OPTIONAL.