22.12.2012 Views

Front cover - IBM Redbooks

Front cover - IBM Redbooks

Front cover - IBM Redbooks

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

12.5 <strong>IBM</strong> WebSphere Portal<br />

12.5.1 Authentication<br />

558 Lotus Security Handbook<br />

<strong>IBM</strong> WebSphere Portal is a comprehensive portal offering from <strong>IBM</strong> for creating<br />

successful business-to-employee (B2E), business-to-business (B2B) and<br />

business-to-consumer (B2C) portals. Many companies that have traditionally<br />

utilized the collaboration capabilities of the Lotus brand of products are now<br />

moving to the WebSphere Portal framework, which seamlessly integrates with<br />

Lotus collaborative technologies. Therefore, it is important that any Lotus<br />

technologist striving to understand Lotus product security also be intimately<br />

familiar with WebSphere Portal security concepts and considerations.<br />

Within the Portal Server, the security subsystem controls access to portal<br />

resources, such as themes and portlets. Authentication is one of the security<br />

component. Users can identify themselves immediately upon entry to the system<br />

or can be challenged later for authentication by the system when they attempt to<br />

access a protected resource. WebSphere Portal Server uses the <strong>IBM</strong><br />

WebSphere Application Server for authentication. Third-party authentication<br />

proxies are also supported with the appropriate Trust Association Interceptor<br />

(TAI).<br />

WebSphere Application Server supports authentication using a Lightweight<br />

Directory Access Protocol (LDAP) directory or an implementation of a<br />

CustomRegistry interface to access non-LDAP user registries. The WebSphere<br />

Application Server also supports third-party authentication using Trust<br />

Association Interceptors (TAIs) for Netegrity SiteMinder, Tivoli Policy Director,<br />

and Tivoli Access Manager, as well as third-party authentication using custom<br />

user registries that are plugged in to WebSphere Application Server<br />

authentication. Furthermore, WebSphere Application Server can support single<br />

sign-on with Domino servers, other WebSphere Application Servers in the same<br />

domain, Tivoli Access Director, and Policy Director WebSEAL.<br />

WebSphere Portal Server uses the Custom Form-based Authentication<br />

mechanism of WebSphere Application Server to prompt users for identity, unless<br />

the system is configured for third-party authentication.<br />

In the former configuration, WebSphere Application Server security is activated,<br />

and the /wps/myportal URL is protected within WebSphere Application Server,<br />

with a setting of “All Authenticated Users” and a challenge mechanism of<br />

“Custom Form-Based Challenge.”<br />

These settings cause WebSphere Application Server to redirect any<br />

unauthenticated user requests to the login form where the user can enter an<br />

identity and password to access the Portal Server.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!