09226nam 2200649Ia 450 991082491640332120200520144314.0(CKB)1000000000243407(SSID)ssj0000949244(PQKBManifestationID)11630168(PQKBTitleCode)TC0000949244(PQKBWorkID)10998256(PQKB)10409723(Au-PeEL)EBL3306757(CaPaEBR)ebr10112857(OCoLC)80245866(CaSebORM)0738428078(MiAaPQ)EBC3306757(OCoLC)830535860(OCoLC)ocn830535860 (EXLCZ)99100000000024340720051128d2003 uy 0engurcn|||||||||txtccrEnterprise business portals II with IBM tivoli access manager /Axel Bucker et alSan Jose, CA IBM2003xxii, 468 p. illIBM redbooks"March 2003."0-7384-2807-8 Includes bibliograpical references (p. 459-461) and index.Front cover -- Contents -- Figures -- Tables -- Notices -- Trademarks -- Preface -- The team that wrote this redbook -- Become a published author -- Comments welcome -- Part 1 Integration design and architecture -- Chapter 1. IBM WebSphere Portal integration -- 1.1 WebSphere Portal offerings -- 1.1.1 WebSphere Portal Enable -- 1.1.2 WebSphere Portal Extend -- 1.1.3 WebSphere Portal Experience -- 1.2 WebSphere Portal architecture -- 1.2.1 Presentation services -- 1.2.2 WebSphere Portal infrastructure -- 1.2.3 Tivoli Access Manager integration architecture -- 1.3 WebSphere Portal security -- 1.3.1 Authentication -- 1.3.2 Authorization -- 1.3.3 Administration -- 1.4 WebSphere Portal and Tivoli Access Manager -- 1.4.1 Tivoli Access Manager added value -- 1.4.2 Tivoli Access Manager managing WebSphere Portal resources -- Chapter 2. SAP Workplace and SAP Enterprise Portal integration -- 2.1 mySAP.com portfolio -- 2.1.1 mySAP.com Workplace -- 2.1.2 SAP Enterprise Portal -- 2.2 mySAP.com Workplace -- 2.2.1 SAP Workplace architecture -- 2.2.2 SAP Workplace security -- 2.3 SAP Workplace using Tivoli Access Manager -- 2.3.1 Access Manager added value -- 2.3.2 Access Manager integration architecture -- 2.4 SAP Portal -- 2.4.1 Introduction -- 2.4.2 SAP Enterprise Information Portal architecture -- 2.4.3 SAP Enterprise Portal security -- 2.5 SAP Portal security using Tivoli Access Manager -- 2.5.1 Access Manager added value -- 2.5.2 Access Manager integration architecture -- Chapter 3. Web Services integration -- 3.1 General business environment -- 3.2 Web Services definition -- 3.2.1 Web Services model -- 3.3 Web Services for real business -- 3.3.1 Security overview -- 3.3.2 XKMS overview -- 3.3.3 SAML overview -- 3.3.4 Summary -- 3.4 Security integration with Tivoli Access Manager -- 3.4.1 Introduction -- 3.4.2 Security models.3.4.3 Administration of Web Services with aznAPI -- 3.4.4 Configuration of Web Services with Tivoli Access Manager -- Part 2 Automobile industry solution -- Chapter 4. Automobile industry solution -- 4.1 Group structure and company profile -- 4.2 Current architecture -- 4.3 Corporate business vision and objectives -- 4.4 Project layout and implementation phases -- 4.5 Business requirements -- 4.6 Functional requirements -- 4.6.1 Risk assessment -- 4.7 Security design objectives -- 4.8 Design approach -- 4.9 Implementation architecture -- 4.9.1 Single sign-on architecture -- 4.9.2 Infrastructure -- 4.9.3 Authorization architecture -- 4.10 Technical implementation -- 4.10.1 Implementing the portal platform -- 4.10.2 SAP ITS integration -- 4.10.3 Exchange 2000 integration -- 4.10.4 Lotus QuickPlace integration -- 4.10.5 Integrating Business Intelligence -- 4.10.6 Performing risk assessment -- 4.11 Conclusion -- Part 3 Retail industry solution -- Chapter 5. Retailer industry solution -- 5.1 Company structure and profile -- 5.2 Current architecture -- 5.3 Corporate business vision and objectives -- 5.4 Project layout and implementation -- 5.5 Business requirements -- 5.6 Functional requirements -- 5.6.1 Risk assessment -- 5.7 Security design objectives -- 5.8 Implementation architecture -- 5.8.1 Integration of Tivoli Access Manager into the architecture -- 5.8.2 Integration of WebSphere Portal into the architecture -- 5.9 Technical implementation -- 5.9.1 System setup -- 5.9.2 Configure Tivoli Access Manager -- 5.9.3 Configure WebSphere Portal Version 4.1.4 -- 5.9.4 Configuring WebSphere Portal to use Tivoli Access Manager -- 5.9.5 Configuring WebSEAL single sign-on -- 5.10 Conclusion -- Chapter 6. Federated single sign-on -- 6.1 Business requirements -- 6.2 Functional requirements -- 6.2.1 Risk assessment -- 6.3 Security design objectives.6.4 Design approach -- 6.5 Implementation architecture -- 6.6 Technical implementation -- 6.6.1 Precondition -- 6.6.2 Sample Custom SOAP rpc Servlet -- 6.7 Conclusion -- Part 4 Appendixes -- Appendix A. mySAP Workplace integration guide -- Overview -- Version information -- Configuration -- WebSEAL configuration -- mySAP Workplace configuration -- Management issues -- User administration -- Appendix B. mySAP Enterprise Portal integration guide -- Overview -- Integration product version information -- Scenario 1 -- Configure WebSEAL -- Configure SAP Enterprise Portal -- Scenario 2 -- Configure WebSEAL -- Configure mySAP Enterprise Portal -- Other integration considerations -- Configuring network firewalls -- Known problems -- Tivoli Access Manager global sign-On (GSO) -- Creating a Tivoli Access Manager GSO resource -- Creating the WebSEAL GSO junction -- Creating and modifying WebSEAL users -- Creating a resource credential -- Configure back-end Web server for BA authentication -- GSO administration and management considerations -- Initial GSO credential population -- Multiple point of access -- GSO password management and synchronization -- Password synchronization between the same registry -- Password synchronization between Access Manager and NT domains -- Appendix C. Solaris installation guidelines -- Verify the current Solaris configuration -- DB2 Version 7.2 installation -- DB2 installation verification -- WebSphere Application Server installation -- WebSphere Application Server installation verification -- WebSphere Application Server security setup -- Personalization and portal installation -- WebSphere Portal verification -- Personalization Workspace verification -- Applying fixpacks -- WebSEAL configuration -- Summary of configuration files involved -- Configure WebSphere Application Server and WebSphere Portal.Configure Tivoli Access Manager -- Set up SSO between WebSEAL and HTTP Server -- Pass WebSphere Portal authorization to Access Manager -- Enable SSL between WebSEAL and HTTP Server -- Improving Portal Server performance -- Sample configuration files -- Appendix D. CGI-program for inactivity timeout -- Appendix E. Additional material -- Locating the Web material -- Using the Web material -- How to use the Web material -- Glossary -- Related publications -- IBM Redbooks -- Other resources -- Referenced Web sites -- How to get IBM Redbooks -- IBM Redbooks collections -- Index -- Back cover.Mastering IBM Tivoli Access Manager is a very important factor in successfully deploying contemporary e-business solutions. Access Manager is the key element in an e-business security framework that needs thorough understanding to achieve maximum security, functionality, and performance. Based on expandable security policies for users, groups, and protected resources, Tivoli Access Manager manages authentication and authorization for application servers, Web sites, and virtually any other resource that requires protection, including custom-written applications. This IBM Redbooks publication describes how to build an integrated enterprise business portal with Tivoli Access Manager Version 4.1, WebSphere Portal, mySAP Workplace, and the SAP Enterprise Portal. It also describes how to implement a federated single sign-on solution within a Web Services scenario. This book is partitioned into general and customer scenario based sections. This book is a valuable resource for security administrators and architects who wish to understand and implement a centralized security infrastructure. Please note that the additional material referenced in the text is not available from IBM.IBM redbooks.Computer networksSecurity measuresWeb portalsSecurity measuresComputer networksSecurity measures.Web portalsSecurity measures.658.4/72Bucker Axel0Antonius Jesper1711473Riexinger Dieter1682755Sommer Frank1711474Sumida Atsushi1711475MiAaPQMiAaPQMiAaPQBOOK9910824916403321Enterprise business portals II with IBM tivoli access manager4102788UNINA