WAS v8.5 > Secure applications and their environment > Secure the Liberty profile and its applications
Developing extensions to the Liberty profile security infrastructure
The Liberty profile server provides various plug points so that we can extend the security infrastructure.
The following topics are covered in this section:
- Follow the instructions in Developing a custom TAI for the Liberty profile to develop custom trust association interceptors (TAI) to extend the security infrastructure of Liberty profile server.
- Follow the instructions in Developing JAAS custom login modules for a system login configuration to develop JAAS custom login modules to extend the security infrastructure of Liberty profile server.
See also
- Developing a custom TAI for the Liberty profile
We can develop a custom trust association interceptor (TAI) class by implementing the com.ibm.wsspi.security.tai.TrustAssociationInterceptor interface provided in the Liberty profile server.- Developing JAAS custom login modules for a system login configuration
For a Liberty profile server, multiple Java Authentication and Authorization Service (JAAS) plug-in points exist for configuring system logins. The Liberty profile uses system login configurations to authenticate incoming requests. We can develop a custom JAAS login module to add information to the Subject of a system login configuration.- Customizing an application login to perform an identity assertion using JAAS
Using the JAAS (JAAS) login framework, we can create a JAAS login configuration that can be used to perform login to an identity assertion on the Liberty profile.
|