Urgent help requested: Access Manager integration with BEA Portal

We're using Access Manager 7.1 and Policy Agent 2.2 to authenticate users for our BEA WL Portal 10 which contains all of our content and applications. The portal contains both anonymous pages and protected pages (for registered users).

Problem: When an anonymous user who is going through a multi-step application flow decides to sign-in to their account (or sign-up) Policy Agent wipes out the current content of the user session, and creates a brand new user session after the user is authenticated. Therefore we cannot send the user back to the same spot in the portal where they were before signing-in.

Is there anyway to make Policy Agent preserve the content and state of http session when authenticating a user?

We have a business requirement to allow users to continue their application process after successfully signing in.

Thanks in advance.

[892 byte] By [RaminAccenturea] at [2007-11-27 11:35:18]
# 1

Hi,

I think this problem is not just related to weblogic 10 agent, it is a general problem for any agents.

Can you please clarify what you mean by "anonymous user "? Do you mean that this user has never logged in to Access Manager, and is just browsing the site as an anonymous user, or do you have a role specified as "anonymous user " that they are currently logged into when browsing the site?

thx,

Sean

seanbrydona at 2007-7-29 17:02:03 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2

We have a role specified as anonymous user.The issue seems to have been resolved by changing the filter mode in AMAgent.properties to "SSO_Only". We are still doing some tests to make sure there haven't been any further impacts created by doing this:

com.sun.identity.agents.config.filter.mode = ALL

to

com.sun.identity.agents.config.filter.mode = SSO_ONLY

RodneyKellya at 2007-7-29 17:02:03 > top of Java-index,Web & Directory Servers,Directory Servers...
# 3

Don't want to be a spoil sport, but SSO_ONLY will break any J2EE security that you may have implemented, so you might want to run a few tests to check that.

Ankush

ankushkapoora at 2007-7-29 17:02:03 > top of Java-index,Web & Directory Servers,Directory Servers...