WebSphere Application Server V7.0: Concepts ... - IBM Redbooks

All communication between the Tivoli Access Manager clients and the Tivoli
Access Manager server is performed through the Java Authorization Contract for
Containers (JACC) API.
Figure 2-1 shows the integration interfaces between WebSphere Application
Server and Tivoli Access Manager.
TAI
Note: AllAuthenticated and Everyone are subjects that are specific to
WebSphere Application Server. These special categories allow access to a
resource to be granted to all those users who have been authenticated
regardless of what repository user groups they might belong to and allow
access to be granted to all users whether or not they are authenticated.
PDJAdmin
(Management)
WebSphere Application Server V7.0
Access Manager for WebSphere Component
JACC
Provider
Contract
JACC
Management
Access Manager Java Runtime Component
Local ACL DB Replica
Access Manager Policy Server AM Authorization Server
Access Manager Server
PDPerm
(Authorization)
Figure 2-1 Integration of WebSphere Application Server with Tivoli Access Manager
32 WebSphere Application Server V7.0: Concepts, Planning, and Design
GSO
Credential
Mapping
PDPrincipal
(Authentication)
User Registry Master ACL DB ACL DB Replica