WAS v8.5 > Secure applications and their environment > Secure the Liberty profile and its applications > Authenticate users in the Liberty profile > Configuring TAI for the Liberty profile

Configuring TAI on the Liberty profile using WebSphere Studio

We can configure a TAI service for the Liberty profile using WebSphere Studio.

Before beginning

For a description of the underlying process of configuring a server, and detailed information about specific aspects of server configuration, see Administering the Liberty profile manually.

Avoid trouble: We can refer to the sample TAI configuration taiConfig.xml file in the ${wlp.install.dir}/templates/config directory, and make sure the configuration in your server.xml file is similar to the one in the sample file.

1. Select Trust Association Interceptor Service and enter an Id name. In this example, the Id name is myTrustAssociation.

   

2. Select Trust Association Interceptor and configure the Id and the Class name which is the fully qualified name of your TAI implementation class, then click New button and select Top Level to enter the Shared Library information. In this example, the Id of your TAI is simpleTAI, class name is com.ibm.websphere.security.sample.SimpleTAI, Enable interceptor and Invoke an interceptor before SSO are checked.

   

3. Enter the ID for the shared Library in the pop-up panel and click OK. In this example, the Id corresponds to the name of the shared library is simpleTAI.

   

4. Configure the Name and Description fields for the shared library, then click New button and select Nested to add a Fileset reference as a nested element.

   

5. Configure the Fileset Service Details by clicking Browse button in the Base Directory field and select the directory where the jar file is located. Then, click Browse button in the Includes pattern field to select your jar file containing your TAI implementation. In this example, the TAI implementation jar file is simpleTAI.jar and located under the ${server.config.dir} directory.

   

6. Configure Interceptor properties Details by clicking Add button to add properties for the interceptor. In this example, there are two pairs of properties for the interceptor. The hostName is machine1 and the application is test1.

   

7. Save the configuration. We can find the following configuration saved in server.xml.

   <trustAssociation id="myTrustAssociation" invokeForUnprotectedURI="false" 
                     failOverToAppAuthType="false"> 
       <interceptors  enabled="true"  
                     className="com.ibm.websphere.security.sample.SimpleTAI" 
                     invokeBeforeSSO="true" invokeAfterSSO="false" libraryRef="simpleTAI"> 
           <properties hostName="machine1" application="test1"/> 
       </interceptors> 
   </trustAssociation> 
   
   <library > 
       <fileset dir="${server.config.dir}" includes="simpleTAI.jar"/> 
   </library> 

Parent topic: Configuring TAI for the Liberty profile

|