Credential Vault
Credential Vault
The Credential Vault is a portlet service that helps portlets and portal users manage multiple identities. The Credential Vault stores credentials that allow portlets to log in to applications outside the portal realm on behalf of the user.
There are two kinds of Credentials;
Active Credentials Establish connections via...
- Basic Authentication
- LTPA token authentication
- Form-based user ID/password login challenges
Passive Credentials Retrieve stored secret data such as, but not limited to...
- user ID and password
- certificates
Certain credential objects can also be used to pass single sign-on tokens for...
- IBM Tivoli Access Manager (TAM) for e-business
- Computer Associates eTrust SiteMinder
...to the backend application in the header.
IBM WebSphere Portal provides one database vault implementation which contains...
administrator-managed vault segment Do not allow users to add new applications to the vault. Allow users to update mappings. user-managed vault segment Allow users to add application definitions, such as a POP3 mail account, under the user vault and store a mapping there. By default, the vault uses an encryption plugin that encodes the passwords in Base 64. WebSphere Portal initially provides two vault adapter configurations that write to the portal database:
- Default vault for administrator-managed vault segments. Stores credentials in the release domain: default-release
- Default vault for user-managed vault segments. Stores credentials in the customization domain: default-customization
We can plug in additional administrator-managed vaults by writing a custom vault adapter. Only an administrator can manage plugged-in vaults.
- Add the Vault Adapter Implementations to the Credential Vault Service, as described in Setting configuration properties.
- Restart WebSphere Portal.
- Use the Credential Vault portlet or the XML Configuration to add a Vault Segment to the vault.
WebSphere Portal also supports the storage and retrieval of credentials from other vault services, such as TAM. WebSphere Portal ships a Credential Vault adapter for TAM. This plugin works on AIX, Solaris, and Windows.
Related information
- Configure vault adapter for Tivoli Access Manager
- Portlet authentication
- Develop portlets
- Single signon
Parent topic:
Single sign-on