Integrate third-party HTTP reverse proxy servers
These steps are required to use a trust association interceptor with a reverse proxy security server.
WebSphere Application Server enables you to use multiple trust association interceptors. The application server uses the first interceptor that can handle the request.
- Access the console.
(dist)(zos) Type http://fully_qualified_host:port_number/ibm/console in a web browser.
(iseries) Type http://server_name:port_number/ibm/console in a web browser.
Port 9060 is the default port number for accessing the console. During installation, however, we might have specified a different port number. Use the appropriate port number.
- Click Security > Global security.
- Under Web and SIP security, click Trust association.
- Select the Enable trust association option.
- Under Additional properties, click Interceptors. The default value appears.
- Verify that the appropriate trust association interceptors are listed.
Results
Trust association is enabled.
What to do next
- If we are enabling security, complete the remaining steps for enabling security.
- Save, stop and restart all of the product servers (deployment managers, nodes and application servers) for the changes to take effect.
Subtopics
- Trust associations
Trust association enables the integration of IBM WAS security and third-party security servers. More specifically, a reverse proxy server can act as a front-end authentication server while the product applies its own authorization policy onto the resulting credentials that are passed by the proxy server.
- Trust association settings
Use this page to enable trust association, which integrates application server security and third-party security servers. More specifically, a reverse proxy server can act as a front-end authentication server while the product applies its own authorization policy onto the resulting credentials passed by the proxy server.
- Trust association interceptor collection
Use this page to specify trust information for reverse security proxy servers.
- Trust association interceptor settings
Use this page to specify trust information for reverse security proxy servers.
Related concepts
Web component security Trust associations
Related tasks
Authenticating users Enable security Configure single sign-on using trust association Configure single sign-on using trust association interceptor ++