Documentation Center

Getting Started

• Release Notes

• What's New in This Release

• Hardware and Software Requirements

• Compatibility Issues

• General Compatibility Information

• Architecture Overview

• Installed Product Layout

• Getting Started with the Access Manager Console

Overview of Access Manager Concepts

• Access Manager Installation Modes

• Access Manager Information Tree

• Realms

• User Sessions and the Session Service

• Authentication Overview

• Authorization and the Policy Service

• Federation, SAML, and Web Services

• Logging and the Java Enterprise System Monitoring Framework

Planning Your Access Manager Deployment

• Access Manager Deployment Planning

• Defining Access Manager Business Requirements

• Designing a Logical Architecture

• Access Manager Components

• Using a Load Balancer

• Using a Multiple JVM Environment

• Directory Server Replication Considerations

Configuring Access Manager After Installation

• Overview of the amconfig Script and amsamplesilent File

• Configuring and Reconfiguring an Instance of Access Manager on UNIX and Linux Systems

• Configuring and Reconfiguring an Instance of Access Manager on Windows Systems

• Uninstalling Access Manager on UNIX and Linux Systems

• Uninstalling Access Manager on Windows Systems

• Uninstalling All Access Manager Instances

• Deploying Multiple Access Manager Instances

• Adding Additional Instances to the Platform Server List and Realm/DNS Aliases

• Installing and Configuring Third-Party Web Containers

• Configuring Access Manager in SSL Mode

• Configuring Access Manager to Run as a Non-root User

Implementing Access Manager Deployment Design

• Configuring Access Manager With a Load Balancer

• Configuring an Access Manager Deployment as a Site

• Configuring Access Manager Sessions

• Implementing Session Failover

• Installing the Session Failover Components

• Installing and Configuring the Access Manager Client SDK

• Installing and Configuring a Distributed Authentication UI Server

• Deploying Access Manager as a Single WAR File

• Changing the Password Encryption Key

Administering Realms

• Access Control Realms Overview

• Creating and Managing Realms

• Adding Services to a Realm

• Defining Privileges

Administering Data Stores

• Access Manager Data Store Types

• Create a New Data Store

• Data Store Attributes

Configuring and Developing Access Manager Authentication

• Authentication Overview

• Authentication Module Types

• Creating Authentication Module Instances

• Creating Authentication Module Chains

• The User Interface Login URL

• Authentication Service Failover

• Persistent Cookies

• Validation Plug-in Interfaces

• Overview of Authentication APIs and SPIs

• Using Authentication APIs

• Using Authentication SPIs

• Using Access Manager Distributed Authentication

• Customizing the Distributed Authentication User Interface

Configuring and Developing Access Manager Policies

• Policy Management Overview

• The Access Manager Policy Framework

• Policy Types

• URL Policy Agent Service

• The Role of Policy Agent Software

• Adding a Policy Enabled Service

• Creating Normal and Referral Policies

• Creating Policies for Peer Realms and Sub Realms

• Modifying Normal and Referral Policies

• Policy Configuration Service

• About the Policy APIs

• Developing Custom Subjects, Conditions, and Referrals

• Creating Policies for a New Service

• Developing and Running a Policy Evaluation Program

• Programmatically Constructing Policies

Installing and Using Access Manager Policy Agents

• The Role of Policy Agent Software

• Policy Agent 2.2 Release Notes

• Policy Agent 2.2 for Sun Java System Application Server 8.1

• Policy Agent 2.2 for Sun Java System Web Server 6.1

• Policy Agent 2.2 for Apache HTTP Server 2.0.54

• Policy Agent 2.2 for Apache Tomcat 5.5 Servlet/JSP Container

• Policy Agent 2.2 for BEA WebLogic Server/Portal 8.1 SP4

• Policy Agent 2.2 for Microsoft Internet Information Services 6.0

• Policy Agent 2.2 Guide for Sun Java System Web Proxy Server 4.0

• Policy Agent 2.2 Guide for IBM WebSphere Application Server 5.1.1

• Policy Agent 2.2 Guide for IBM WebSphere Application Server 6.0

• Policy Agent 2.2 Guide for IBM WebSphere Portal Server 5.1.0.2

• Policy Agent 2.2 Guide for SAP Enterprise Portal 6.0 and Web Application Server 6.40

• Policy Agent 2.2 Guide for IBM Lotus Domino 6.5.4

• Policy Agent 2.2 Guide for BEA WebLogic Server 9.0/9.1

• Precautions Against Cookie Hijacking in an Access Manager Deployment

Managing User Sessions and Single Sign-On

• Overview of Access Manager User Sessions

• Cookies and Session Objects

• Session Management

• Single Sign-On Session

• The Single Sign-On Java APIs

• Using the SSO Code Samples

Configuring and Managing Access Manager Federation

• Introduction to the Liberty Alliance Project

• Process of Federation

• Creating and Configuring Provider and Affiliate Entities

• Creating and Configuring Authentication Domains

• Auto-Federation

• Bulk Federation

• Dynamic Identity Provider Proxying

• The Pre-login URL

• Federation API

Using Access Manager Authentication Web Services

• Authentication Web Service Overview

• Authentication Web Service Process

• Authentication Web Service Attribute

• Authentication Web Service API

• Authentication Web Service Sample

Using Access Manager Data Web Services

• Data Services Overview

• Liberty Personal Profile Service

• Liberty Employee Profile Service

• Data Services Template API

• Developing A New Data Service

Using the Access Manager Discovery Service

• Discovery Service Overview

• Discovery Service Process

• Discovery Service Attributes

• Discovery Entries and Resource Offerings

• Discovery Service APIs

Using the Access Manager SOAP Binding Service

• SOAP Binding Service Overview

• SOAP Binding Process

• SOAP Binding Service Attributes

• SOAP Binding Service Package

Administering SAML

• SAML Overview

• SAML Attributes

• SAML API

Using the Access Manager Logging Feature

• How the Logging Feature Works

• Error and Access Logs

• Log Files

• Access Manager Service Logs

• Secure Logging

• Command Line Logging

• Logging Properties

• Remote Logging

• Debug Files

• Writing LogRecords To A Log File or Table

• Reading LogRecords From A Log File or Table

• Compiling Logging Programs

• Implementing a Remote Logging Application in a Container

• Logging to a Second Access Manager Server

• Using the Logging SPIs

Using the Client SDK

• How the Client SDK Works

• JDK and CLASSPATH Requirements

• Installing the Client SDK

• Initializing the Client SDK

• Setting Up a Client Identity

Updating and Redeploying Access Manager WAR Files

• About Access Manager WAR Files

• Updating Modified WARs

• Redeploying Modified Access Manager WAR Files

Customizing Access Manager

• Building Custom Web Applications

• Customizing Branding and Functionality

• Customizing the Self-Registration Page

• Customizing the Authentication User Interface

• Customizing the Distributed Authentication User Interface

Using Access Manager Code Samples

• Console Samples

• Using the SSO Code Samples

• Running the Sample Authentication Programs

• Using the Policy Code Samples

• Authentication Web Service Sample

• Discovery Service Sample

• Liberty-based and SAML Samples

• Using the Logging Sample Files

Using Access Manager Command Line Utilities

• amadmin

• ampassword

• VerifyArchive

• amsecuridd Helper

Tuning Access Manager and Components

• Tuning Access Manager and Other Components

• Overview of the Access Manager Tuning Scripts

• Access Manager amtune-env File Parameters

• Directory Server Tuning Parameters

• Directory Server Tuning Scripts

• Tuning Considerations

Reference

• amConfig.properties Reference

• serverconfig.xml Reference

• Access Manager Log File Reference

• Access Manager Component Error Codes

• Access Manager 7.1 Java API Reference

• Access Manager 7.1 C API Reference

• Federation API

• Authentication Web Service API

• Data Services Template API

• Discovery Service APIs

• SAML API

• Liberty-related Application Programming Interfaces

Troubleshooting

• How the Logging Feature Works

• Error and Access Logs

• Access Manager Service Logs

• Secure Logging

• Remote Logging

• Debug Files

• Access Manager Component Error Codes

• Access Manager Log File Reference

• Changing the Password Encryption Key

• Precautions Against Cookie Hijacking in an Access Manager Deployment

There is troubleshooting information in each Policy Agent 2.2 Guide specific to the supported Agent platform. See the Policy Agent collection, http://docs.sun.com/app/docs/coll/1322.1.