Network Deployment (Distributed operating systems), v8.0 > Secure applications and their environment > Authenticate users > Implement single sign-on to minimize web user authentications
SSO with TAM or WebSEAL
Overview
We can enable single sign-on to WAS using either of the following as the reverse proxy server...
The proxy server...
- Authenticates users
- Forwards credentials to WAS in the form of an IV Header
TAIs on the WAS application host...
- Extract the end-user name from the HTTP header and forward to embedded TAM
- Credential information is created and used to authorize the user
With TAI++, all user information is available in the HTTP header, not just the name. An LDAP call is not required.
Enable SSO to WAS using WebSEAL or plug-in for web servers
- Enable embedded TAM
- Role-based security with embedded TAM
- Create a trusted user account for TAM in shared LDAP user registry
- Configure WebSEAL or configure TAM plug-in
- Configure TAI or configure TAI++
Related
Single sign-on settings
com.tivoli.pd.jcfg.PDJrteCfg
com.tivoli.pd.jcfg.SvrSslCfg
Configure global sign-on principal mapping
Implement single sign-on to minimize web user authentications