Prerequisites for Single Sign-On (SSO) 

There are several prerequisites for configuring single sign-on (SSO) between the WASs that underlie the IBM Connections and ECM servers.

Before configuring SSO between the IBM Connections and ECM servers, ensure that:

• The two instances of WAS use the same LDAP directory for authentication.

• The two instances of WAS specify the same domain name (for example, .example.com) for all the single sign-on hosts.
  To verify the domain name...to navigate to the single sign-on settings pages for the IBM Connections and ECM WAS instances:

  On the IBM Connections server
  

  1. Open the WAS administration console.

  2. Click Security > Global security.

  3. Click Web and SIP security.

  4. Click Single sign-on (SSO)

  5. See the value in the Domain name field.
     

  On the ECM server

  Note: The steps assume the ECM server uses WAS version 6.1.0. If your environment uses WAS version 7.0, the steps are the same as the IBM Connections server.
  

  1. Open the WAS administration console.

  2. Expand Security > Secure administration, applications and infrastructure.

  3. Click Web security.

  4. Click Single sign-on (SSO).

  5. See the value in the Domain name field.
     

• Application security is enabled.
  Application security, including authentication and role-based authorization, is not enforced unless Global Security is active. Note that Global Security is enabled by default during the installation of IBM Connections. Thus, application security is enabled on IBM Connections, by default. Also, the fact that the two instances of WAS use the same LDAP server for authentication ensures that application security is enabled on the IBM Connections server. You need to perform the following steps only if Application security has been disabled for some reason.

  On the IBM Connections server
  

  1. Open the WAS administration console.

  2. Expand Security > Global security.

  3. Select the Enable application security check box. See information on enabling security in the WAS Version 7.0 Information Center.

  4. Click Apply.

  5. Click Save.
     

  On the ECM server

  Note: The steps assume the ECM server uses WAS version 6.1.0. If your environment uses WAS version 7.0, the steps are the same as the IBM Connections server.
  

  1. Open the WAS administration console.

  2. Expand Security > Secure administration, applications and infrastructure.

  3. Click Security Configuration Wizard.

  4. Select the Enable application security check box, and then follow the configuration wizard. See information on enabling security in the version of the WAS Information Center applicable to your environment.

  5. Click Apply.

  6. Click Save.
     

Parent topic

Configure single sign-on with ECM servers

   

 

});

+

Search Tips   |   Advanced Search