Enable the JACC provider for Tivoli Access Manager

 

The Java Authorization Contract for Container (JACC) provider for Tivoli Access Manager is configured by default. Use this topic to enable the JACC provider for Tivoli Access Manager.

 

Overview

Do not perform this task if you are configuring the JACC provider for Tivoli Access Manager to supply authentication services only. Only perform this task for installations that require both Tivoli Access Manager authentication and authorization protection. The JACC provider for Tivoli Access Manager is configured by default. The following list shows the JACC provider configuration settings for Tivoli Access Manager:

Field	Value
Name	Tivoli Access Manager
Description	This field is optional and used as a reference.
J2EE policy class name	com.tivoli.pd.as.jacc.TAMPolicy
Policy configuration factory class name	com.tivoli.pd.as.jacc.TAMPolicyConfigurationFactory
Role configuration factory class name	com.tivoli.pd.as.jacc.TAMRoleConfigurationFactory
JACC provider initialization class name	com.tivoli.pd.as.jacc.cfg.TAMConfigInitialize
Requires the EJB arguments policy context handler for access decisions	false
Supports dynamic module updates	true

To enable the JACC provider for Tivoli Access Manager, use the previous settings and complete the following steps:

 

Procedure

1. Click Security > Secure administration, applications, and infrastructure > External authorization providers.

2. Select the External authorization using a JACC provider option, then click Apply.

3. Under Related Items, click External JACC provider. The JACC provider settings for Tivoli Access Manager are displayed.

4. Verify that the correct settings are present to work with your Tivoli Access Manager configuration. For more information, see External Java Authorization Contract for Containers provider settings.

5. Under Additional properties, click Tivoli Access Manager properties.

6. Click the Enable embedded Tivoli Access Manager option and verify that the correct Tivoli Access Manager server and WebSphere Application Server settings exist. For more information, see Tivoli Access Manager JACC provider settings.

7. Click OK.

8. Save the settings by clicking Save at the top of the page.

9. Log out of the console.

10. Restart WAS. The security configuration is now replicated to managed servers and node agents. These other servers within a cell also require restarting before the security changes take effect.

---

 

Related tasks

Configure the JACC provider for Tivoli Access Manager using the administrative console
Configure the JACC provider for Tivoli Access Manager using the wsadmin utility
Enabling an external JACC provider

 

Related Reference

External Java Authorization Contract for Containers provider settings
Tivoli Access Manager JACC provider settings