1. Security Guide
  2. Setting Siebel EAI Application Object Manager for DB/SSO

Setting Siebel EAI Application Object Manager for DB/SSO

As of the Siebel CRM 20.10 update, you can use a database security adapter in Single Sign-On (SSO) mode without LDAP. Prior to Siebel CRM 20.10, you could only use an LDAP security adapter for SSO. The tasks involved in configuring a database security adapter to support SSO are as follows.

If you would like to use DB/SSO using the DBSecAdpt, then you can setup Siebel REST API Inbound authentication with Siebel EAI Object Manager (EAIObjMgr_<lang>) using DB/SSO starting from Siebel 20.10 and later versions. Follow the steps from Siebel Security Guide in the section “Creating Siebel Gateway Security Profile with Database Authentication Advanced Mode”, and once completed, perform the below steps to enable EAI Object Manager for the DBSecAdpt profile in advanced mode:

  1. After the security profile has been created, as shown in the “Creating Siebel Gateway Security Profile with Database Authentication Advanced Mode” section, create the enterprise and server profiles and deploy them if not already done.
  2. Connect to the server manager and set the following parameter values for the component of interest (EAIObjMgr_<lang> for example): SecAdptMode=DBSSO and SecAdptName=DBSecAdpt. 
    <-- Component Parameters -->
change param SecAdptMode=DBSSO for comp EAIObjMgr_enu
change param SecAdptName=DBSecAdpt for comp EAIObjMgr_enu
  3. Add the database adapter advanced subsystem parameter values described in the following Server Manager commands for SSO support. These parameters are required in addition to other existing parameters.
    <-- Named subsystem "dbsecadpt" advanced parameters -->
change param DBSecAdpt_SingleSignOn=TRUE for named subsystem dbsecadpt
change param DBSecAdpt_TrustToken=<value> for named subsystem dbsecadpt
change param DBSecAdpt_SharedDBUsername=<DB user name> for named subsystem dbsecadpt
change param DBSecAdpt_SharedDBPassword=<DB password>for named subsystem dbsecadpt
  4. Restart the Siebel service.

For more information about configuring SSO, see Siebel Security Guide.