9
Configure the WebLogic Authentication Provider
SAS provides a custom WebLogic authentication provider. The class files for the provider were
copied to the WebLogic installation directory in an earlier step. To configure the SAS trusted login
module as a WebLogic authentication provider, follow these steps:
1. Start the WebLogic Administration Server.
2. Access the WebLogic Administration Console. In a default configuration that SAS Deployment
Wizard performs, the URL is http://hostname:7501/console.
3. Under Domain Structure, click Security Realms
4. Click myrealm—or the name of your realm, if you created your own—and click the Providers
tab.
5. Click Lock & Edit to enable editing in the console, and click New in the Authentication Providers
table.
6. In the Name field, enter SASTrustedAuthenticator. From the Type list, select
WLTrustAuthenticator. Click OK.
7. The SASTrustedAuthenticator should appear last in the authenticator order below the default
authenticator and identity asserter. Click the hyperlinked name for SASTrustedAuthenticator.
8. Set the value for Control Flag to OPTIONAL. Click the Provider Specific link. This is where you
set the configuration values for the trusted login module. Set these values:
Host: “fully-qualified-hostname-for-metadata‐server”
Domain: web
Port: 8561
Encrypt: false
Trusted User: sastrust@saspw
Trusted Password: encoded-password
Debug: false
If the trusted user identity is a host identity, preface it with the domain and a single slash, such as
domain\sastrust. This format should match the identity that is stored in the SAS metadata
repository.
9. Click Save and then Activate Changes.
10. Restart the WebLogic Administration Server.
Do not set the control flag for other authentication providers to SUFFICENT. For more information,
see section "Using Other Authentication Providers" on the next page.
Authentication with the WebLogic Internal LDAP
Add SAS users to the WebLogic embedded LDAP server.
1. Select Security Realms > myrealm. Click the Users and Groups tab.
2. Click Groups.
3. Click New, provide a name of SASUsers and click OK.
4. Click Users.
Comentários a estes Manuais