Single Sign On for Remote Apps Accessed Through the Portal

Hi,

We are trying to design our portal deployment. We have some applications running on some Tomcat and other application servers. We want them to be accessible only through the Portal. We also have some portlets which benefit from SSO easily. However the remote applications (still in the corporate but not on the Portal) which we provide via URLScrapper (any better alternative?) do not directly benefit from SSO. Or can they? So we SSO and user related information (like roles) in those remote applications. How can we achieve this?

Thanks in advance.

[573 byte] By [ErsinEr] at [2007-11-26 11:44:12]
# 1

You can install Policy Agents on the other web containers (Apache, etc). These agents will protect the web resources on that server and will enable SSO.

More information:

http://docs.sun.com/app/docs/coll/1322.1

http://www.sun.com/download/index.jsp?cat=Identity%20Management&tab=3&s ubcat=Access%20Manager

- Jim

jimfaut at 2007-7-7 11:52:37 > top of Java-index,Web & Directory Servers,Portal Servers...
# 2

Thank you very much Jim!

Infact I know a little bit about the Access Manager and Agents. However my main problem is about using the URL Scraper on the Portal with a remote Agent on another App server. How can forward SSO session information from the Portal (URL Scraper) to the remote Agent?

(I have also asked this on another similar thread here:

http://forum.sun.com/jive/thread.jspa?threadID=96303&tstart=0)

Thanks again.

ErsinEr at 2007-7-7 11:52:37 > top of Java-index,Web & Directory Servers,Portal Servers...
# 3

The Policy Agent checks the user's SSO Token to determine whether the user can access the requested resource. The SSO Token is stored as a cookie called iPlanetDirectoryPro. You can try adding this cookie to cookiesToForwardList property of the URL Scraper. This should send the SSO Token to the remote web server and the policy agent should let the user in.

- Jim

jimfaut at 2007-7-7 11:52:37 > top of Java-index,Web & Directory Servers,Portal Servers...