IBM WebSphere V5.0 Security - CGISecurity

►Application tier: may represent a new or existing application that will be part ofthe Single Sign-On domain. In our case, these applications are theWebSphere J2EE ITSOBank application and a simple Domino applicationused with ITSOBank.11.3 Creating the Runtime pattern for the ITSOBankapplicationRuntime patterns represent a very high level physical solution architecture,where networks and nodes are identified but no product selection has beendone. Most Runtime patterns will consist of the core set of nodes used for Webapplication design with additional nodes specific to the customer situation.In this section, we briefly describe Runtime patterns for both Self-Service::Directly Integrated Single Channel and the Access Integration:: Extended SingleSign-On application pattern. At the end of this section, we will provide a Runtimepattern for the ITSOBank sample application. This combined Runtime pattern willbe used in the Product mapping section to map certain products and to describethe security flow between the nodes.11.3.1 Runtime pattern for Self-Service:Directly Integrated SingleChannel application patternOur Runtime pattern for Self-Service application is based on a simple three tierarchitecture where the Web server is separated from Web application server.The Web server resides in the demilitarized zone and is responsible for the Webpresentation logic. The application server runs the application business logic andcommunicates with the back-end systems and databases.The LDAP directory is installed behind the domain firewall and is used to storeuser information related to authentication and authorization.356 IBM WebSphere V5.0 Security Handbook