External authentication interface overview

The external authentication interface (EAI) extends the authentication process for WebSEAL, allowing an independent remote service such as WebSphere Application Server to handle the authentication process for WebSEAL. The identity information returned by the EAI service generates user credentials. ISAM can accept identity information from EAI users that exist in the ISAM internal or external user registry. The EAI returns user identity information in HTTP response headers. The authentication operation is performed external to WebSEAL by a custom application located on a remote, junctioned server. The design, methodology, and code for the custom authentication application is entirely the responsibility of the application developer. This developer reference document does not provide any instructions for the construction of this custom authentication operation. However, the requirement of this application is to return identity information resulting from the custom authentication process in specially named HTTP response headers.

Parent topic: External authentication interface

Related concepts

  1. Process flow
  2. configuration
  3. HTTP header reference
  4. Use with existing WebSEAL features