WebSphere Application Server V7.0: Concepts ... - IBM Redbooks

2.1 Tivoli Access Manager
IBM Tivoli Access Manager provides a more holistic security solution at the
enterprise level than the standard security mechanisms found in WebSphere
Application Server.
Tivoli Access Manager provides the following features:
► Defines and manages centralized authentication, access, and audit policy for
a broad range of business initiatives.
► Establishes a new audit and reporting service that collects audit data from
multiple enforcement points, as well as from other platforms and security
applications.
► Enables flexible Single Sign-on (SSO) to Web-based applications that span
multiple sites or domains with a range of SSO options, to eliminate help-desk
calls and other security problems associated with multiple passwords.
► Uses a common security policy model with the Tivoli Access Manager family
of products to extend support to other resources.
► Manages and secures your business environments from your existing
hardware (mainframe, PCs, servers) and operating system platforms
including Windows, Linux, AIX, Solaris, and HP-UX.
► Provides a modular authorization architecture that separates security code
from application code.
In summary, Tivoli Access Manager provides centralized authentication and
authorization services to different products. Applications delegate authentication
and authorization decisions to Tivoli Access Manager.
For more information about Tivoli Access Manager, see the following Web page:
http://www.ibm.com/software/tivoli/products/access-mgr-e-bus/
2.1.1 Integration with WebSphere Application Server
WebSphere Application Server provides its own security infrastructure. This
infrastructure is composed of some mechanisms that are specific to WebSphere
Application Server but also many that use open security technologies standards.
This security technology is widely proven, and the software can integrate with
other enterprise technologies.
For more information about WebSphere Application Server’s security
infrastructure, refer to 12.2, “Security in WebSphere Application Server” on
page 381.
30 WebSphere Application Server V7.0: Concepts, Planning, and Design