Create a WebSEAL user in ISAM for connections to the backend server

For single sign-on IBM Security Identity Manager requires an IBM Security Access Manager user. To create the WebSEAL user we can use pdadmin.sh:

  1. Log on to the server where ISAM is installed and run:

      /path/to/PolicyDirector/bin/pdadmin

  2. At the command prompt, type login.

  3. Enter sec_master when prompted for a user ID.

  4. Specify the associated password at the Enter Password prompt.

    For example:

      pdadmin> login
      Enter User ID: sec_master
      Enter Password: password
      pdadmin>

  5. Create the ssouser user:

      pdadmin sec_master> user create ssouser cn=sso,cn=Users,secAuthority=Default" "ssouser" password

  6. Make the user account valid:

      pdadmin sec_master> user modify ssouser account-valid yes


Parent topic: Configure ISIM for SSO with application server trust association interceptors and ISAM WebSEAL