To Map an Application Principal to EIS Principals

When using the GlassFish Server, you can use security maps to map the caller identity of the application (principal or user group) to a suitable EIS principal in container-managed transaction-based scenarios. When an application principal initiates a request to an EIS, the GlassFish Server first checks for an exact principal by using the security map defined for the connector connection pool to determine the mapped back-end EIS principal. If there is no exact match, the GlassFish Server uses the wildcard character specification, if any, to determine the mapped back-end EIS principal. Security maps are used when an application user needs to execute EIS operations that require to be executed as a specific identity in the EIS.

To work with security maps, use the Administration Console. From the Administration Console, follow these steps to get to the security maps page.

1. In the navigation tree, expand the Resources node.

2. Expand the Connectors node.

3. Select the Connector Connection Pools node.

4. On the Connector Connection Pools page, click the name of the connection pool for which you want to create a security map.

5. Click the Security Maps tab.

6. Click New to create a new security map for the connection pool.

7. Type a name by which you will refer to the security map, as well as the other required information.

   Click the Help button for more information on the individual options.