Establish SSO connections through an LTPA token

To establish a Single Sign-On (SSO) connection through an LTPA token, enable an outbound connection policy for the SSO connection. For example:

<policy url="http://remoteserver.com/sso-protected/*" basic-auth-support="true">
     <meta-data>
          <name>hpaa.authtype</name>
          <value>ltpa</value>
     </meta-data>
     <meta-data>
          <name>hpaa.slotid</name>
          <value>OutboundConnectionCredentials</value>
     </meta-data>
     <meta-data>
          <name>forward-credentials-from-vault</name>
          <value>true</value>
     </meta-data>
</policy>

...where...

basic-auth-support	Enable the authentication filter.
hpaa.authtype	Authentication type as SSO authentication using LTPA tokens.
hpaa.slotid	Slot ID of the credential vault. For instructions about how to provide the user credentials of the remote connection, read Provide user credentials for authenticated connections. The slot ID identifies the Credential Vault slot for the user subject for which the LTPA tokens are used.
forward-credentials-from-vault	Credentials of the SSO authentication are gathered from the Credential Vault.

Parent Authenticate outbound HTTP connections

Related tasks:

Provide user credentials for authenticated connections