Deployment Example 2: Federation Using SAML v2

ProcedureTo Configure the Web Policy Agents to Work with the Web Policy Agents Load Balancer

In this procedure you modify the AMAgent.properties file. Map Protected Resource 3 and Protected Resource 4 to Load Balancer 11.

  1. Log in as a root user to Protected Resource 3.


    # cd etc/opt/SUNWam/agents/es6/
    config/_opt_SUNWwbsvr_https-ProtectedResource-3.siroe.com
  2. Use a text editor to modify the AMAgent.properties file.

    For this property:

    com.sun.am.policy.agents.config.notenforced_list

    append the following to the end of the value string :

    http://ProtectedResource-3.siroe.com:1080/launch.html http://LoadBalancer-11.siroe.com:90/launch.html

  3. Set the following properties:


    com.sun.am.load_balancer.enable = true
    com.sun.am.policy.agents.config.override_protocol = true
    com.sun.am.policy.agents.config.override_host = true
    com.sun.am.policy.agents.config.override_port = true
    com.sun.am.policy.agents.config.agenturi.prefix =
    https://LoadBalancer-11.siroe.com:6443/amagent
    com.sun.am.policy.agents.config.fqdn.map = 
    [LoadBalancer-11.siroe.com|LoadBalancer-11.siroe.com]
    com.sun.am.policy.agents.config.fqdn.default = 
    LoadBalancer-11.siroe.com

    Save the file.

  4. Restart Web Server 3 on Protected Resource 3.


    #cd /opt/SUNWwbsvr/https-ProtectedResource-3.siroe.com
    ./stop; ./start
  5. Log in as a root user to Protected Resource 4.


    # cd etc/opt/SUNWam/agents/es6/
    config/_opt_SUNWwbsvr_https-ProtectedResource-4.siroe.com
  6. Use a text editor to modify the AMAgent.properties file.

    For this property:

    com.sun.am.policy.agents.config.notenforced_list

    append the following to the end of the value string :

    http://ProtectedResource-4.siroe.com:1080/launch.html http://LoadBalancer-11.siroe.com:90/launch.html

  7. Set the following properties:


    com.sun.am.load_balancer.enable = true
    com.sun.am.policy.agents.config.override_protocol = true
    com.sun.am.policy.agents.config.override_host = true
    com.sun.am.policy.agents.config.override_port = true
    com.sun.am.policy.agents.config.agenturi.prefix =
    https://LoadBalancer-11.siroe.com:6443/amagent
    com.sun.am.policy.agents.config.fqdn.map = 
    [LoadBalancer-11.siroe.com|LoadBalancer-11.siroe.com]
    com.sun.am.policy.agents.config.fqdn.default = 
    LoadBalancer-11.siroe.com

    Save the file.

  8. Restart Web Server 4 on Protected Resource 4.


    #cd /opt/SUNWwbsvr/https-ProtectedResource-4.siroe.com
    ./stop; ./start