Setting Siebel EAI Application Object Manager for LDAP/SSO

To setup Siebel REST API Inbound authentication, we need to setup a Siebel EAI Object Manager (EAIObjMgr_<lang>) that will be using LDAP/SSO using the LDAPSecAdpt profile. Follow the below steps for LDAP/SSO setup.

1. Login to Siebel Call Center application or any DB authentication application and navigate to Site Map >> Administration - Server Configuration >> Profile Configuration.
2. Query for the LDAPSecAdpt profile to view the LDAP profile parameters.
3. Provide the LDAPSecAdpt profile parameters depending on your LDAP directory server.

   Example: LDAPSecAdpt Profile Parameters for LDAP Authentication

   Parameter	Description
   Port	LDAP Port
   BaseDN	dc=xx,dc=xx,dc=xx
   ApplicationUser	cn=username,dc=xx,dc=xx,dc=xx
   ApplicationPassword	password
   ServerName	LDAP Server Name
   SharedCredentialsDN	cn=SharedUser,cn=username,dc=xx,dc=xx,dc=xx
   CredentialsAttributeType	mail
   UsernameAttributeType	uid
   SharedDBUsename	DB Username
   SharedDBPassword	DB Password
   PasswordAttributeType	userPassword

4. Once the LDAP parameters are entered, make sure to enable Single Sign On (SSO) by adding below parameters.

   Example: SSO Parameters For LDAPSecAdpt For SSO Authentication

   Parameter	Description
   SingleSignOn	TRUE
   TrustToken	ABCDE (This is an example string only. Use a string that meets your business requirements.)

5. Make sure to enable the EAI component group and ensure it is online. Once the SSO parameter is setup, connect to Siebel Server Manager and enable the LDAPSecAdpt profile for the EAI Object Manager (EAIObjMgr_<lang>).

   Example: Server Manager Command To Make EAI Object Manager Use LDAP/SSO

   change param SecAdptName=LDAPSecAdpt for comp EAIObjMgr_enu
   change param SecAdptMode=LDAP for comp EAIObjMgr_enu

6. Restart the Siebel service.