Portal Express, Version 6.0
Operating systems: i5/OS, Linux, Windows
Deploying portlets in a secure environment
IBM® WebSphere® Portal Express provides two user authentication modes that the Portlet Deployment Manager can use to authenticate with the IBM WebSphere Application Server administrative services when security is enabled.
The authentication modes are specified by the use.admin.user property in Deployment Service.
The following two methods are supported in both a standalone or clustered environment.
- Single ID method (use.admin.user=true): This is the default mode. In this mode, WebSphere Portal Express impersonates the server ID (see http://www.ibm.com/software/webservers/appserv/was/library/ for additional information) for WAR deployment requests.
- Multiple ID method (use.admin.user=false): Use the login ID of the user who issued the WAR deployment request. In this mode, every user with portlet deployment rights must be added to the WebSphere Application Server Console User list with Administrator rights. Alternatively, you can add the Group of Administrators to the WebSphere Application Server Console Group with Administrator rights.
The main difference between the two methods is that the single ID method uses a preset ID regardless of who you log in as while the multiple ID method uses the ID you logged in with but you cannot deploy a portlet unless your ID is added to the WebSphere Application Server Console Group with Administrator rights.