Preface
Sun OpenSSO Enterprise 8.0 is an access management product that includes
a set of software components to provide the authentication and authorization
services needed to support enterprise applications distributed across
a network or Internet environment. This book, Sun OpenSSO Enterprise 8.0
Technical Overview, describes the features of OpenSSO Enterprise, explains
what it does, and illustrates how it works.
Before You Read This Book
This book is intended for use by IT administrators and software
developers who implement a web access platform using Sun servers and
software. Readers of this guide should be familiar with the following
technologies:
-
SOAP
-
Liberty Alliance Project specifications
-
WS-* Specifications
-
Security Assertion Markup Language (SAML) Specifications
-
eXtensible Markup Language (XML)
-
Lightweight Directory Access Protocol (LDAP)
-
JavaTM
-
JavaServer PagesTM (JSP)
-
HyperText Transfer Protocol (HTTP)
-
HyperText Markup Language (HTML)
Related Books
Related documentation is available as follows:
OpenSSO Enterprise 8.0 Core Documentation
The OpenSSO Enterprise 8.0 core documentation set contains the following
titles:
-
The Sun
OpenSSO Enterprise 8.0 Release Notes will be available
online after the product is released. It gathers an assortment of
last-minute information, including a description of what is new in
this current release, known problems and limitations, installation
notes, and how to report issues with the software or the documentation.
-
The Sun
OpenSSO Enterprise 8.0 Technical Overview (this
guide) provides high level explanations of how OpenSSO Enterprise components work
together to protect enterprise assets and web-based applications.
It also explains basic concepts and terminology.
-
The Sun
OpenSSO Enterprise 8.0 Deployment Planning Guide provides
planning and deployment solutions for OpenSSO Enterprise based on the solution
life cycle
-
The Deployment
Example: Single Sign-On, Load Balancing and Failover Using Sun OpenSSO
Enterprise 8.0 provides instructions for building
an OpenSSO solution incorporating authentication, authorization and
access control. Procedures for load balancing and session failover
are also included.
-
The Deployment
Example: SAML v2 Using Sun OpenSSO Enterprise 8.0 provides
instructions for building an OpenSSO solution incorporating SAML v2 federation.
Installation and configuration procedures are included.
-
The Sun
OpenSSO Enterprise 8.0 Installation and Configuration Guide provides
information for installing and configuring OpenSSO Enterprise.
-
The Sun
OpenSSO Enterprise 8.0 Performance Tuning Guide provides
information on how to tune OpenSSO Enterprise and its related components for optimal
performance.
-
The Sun
OpenSSO Enterprise 8.0 Administration Guide describes
administrative tasks such as how to create a realm and how to configure a policy. Most of the tasks described
can be performed using the administration console as well as the ssoadm command line utilities.
-
The Sun
OpenSSO Enterprise 8.0 Administration Reference is
a guide containing information about the command line interfaces,
configuration attributes, internal files, and error codes. This information
is specifically formatted for easy searching.
-
The Sun
OpenSSO Enterprise 8.0 Developer’s Guide offers
information on how to customize OpenSSO Enterprise and integrate its functionality
into an organization’s current technical infrastructure. It
also contains details about the programmatic aspects of the product
and its API.
-
The Sun OpenSSO Enterprise 8.0 C API Reference for Application and Web
Policy Agent Developers provides summaries of
data types, structures, and functions that make up the public OpenSSO Enterprise C
SDK for application and web agent development.
-
The Sun OpenSSO Enterprise 8.0 Java API Reference provides
information about the implementation of Java packages in OpenSSO Enterprise.
-
The Sun OpenSSO Enterprise Policy Agent 3.0 User’s Guide for Web
Agents and Sun OpenSSO Enterprise Policy Agent 3.0 User’s
Guide for J2EE Agents provide an overview of the
policy functionality and policy agents available for OpenSSO Enterprise.
Updates to the Release Notes and links
to modifications of the core documentation can be found on the OpenSSO Enterprise page
at docs.sun.com.
Updated documents will be marked with a revision date.
Related Product Documentation
The following table provides links to documentation for related
products.
Searching Sun Product Documentation
Besides searching Sun product documentation from the docs.sun.comSM web site, you can use a search
engine by typing the following syntax in the search field:
search-term site:docs.sun.com
|
For example, to search for “broker,” type the following:
To include other Sun web sites in your search (for example, java.sun.com, www.sun.com, and developers.sun.com),
use sun.com in place of docs.sun.com in
the search field.
Documentation,
Support, and Training
The Sun web site provides information about the following additional
resources:
Third-Party Web Site References
Third-party URLs are referenced in this document and provide
additional, related information.
Note –
Sun is not responsible for the availability of third-party
web sites mentioned in this document. Sun does not endorse and is
not responsible or liable for any content, advertising, products,
or other materials that are available on or through such sites or
resources. Sun will not be responsible or liable for any actual or
alleged damage or loss caused or alleged to be caused by or in connection
with use of or reliance on any such content, goods, or services that
are available on or through such sites or resources.
Sun Welcomes Your Comments
Sun is interested in improving its documentation and welcomes
your comments and suggestions. To share your comments, go to http://docs.sun.com and click Send Comments.
In the online form, provide the full document title and part number.
The part number is a 7-digit or 9-digit number that can be found on
the book's title page or in the document's URL. For example, the title
of this book is Sun OpenSSO Enterprise 8.0 Technical
Overview, and the part number is 820–3740.
Default
Paths and Directory Names
The OpenSSO Enterprise documentation uses the following terms
to represent default paths and directory names:
Table P–1 Default Paths and Directory
Names
|
Term
|
Description
|
|
zip-root
|
Represents the directory where the opensso.zip file
is decompressed.
|
|
OpenSSO-Deploy-base
|
Represents the directory where the web container deploys opensso.war. The location varies depending on the web container
used. To determine the value of OpenSSO-Deploy-base, view the file in the .openssocfg directory
(located in the home directory of the user who deployed opensso.war). For example, consider this scenario with Application
Server 9.1 as the web container:
The .openssocfg directory is in the root home directory (/), and the file name
in .openssocfg is AMConfig_opt_SUNWappserver_domains_domain1_applications_j2ee-modules_opensso_. Thus, the value for OpenSSO-Deploy-base is:
/opt/SUNWappserver/domains/domain1/applications/j2ee-modules/opensso
|
|
ConfigurationDirectory
|
Represents the name of the directory specified during the initial
configuration of OpenSSO Enterprise. The default is opensso in
the home directory of the user running the Configurator. Thus, if
the Configurator is run by root, ConfigurationDirectory is /opensso.
|
Typographic Conventions
The following table describes the typographic changes that are
used in this book.
Table P–2 Typographic Conventions
|
Typeface
|
Meaning
|
Example
|
|
AaBbCc123
|
The names of commands, files, and directories, and onscreen
computer output
|
Edit your .login file.
Use ls -a to list all files.
machine_name% you have mail.
|
|
AaBbCc123
|
What you type, contrasted with onscreen computer output
|
machine_name% su
Password:
|
|
AaBbCc123
|
A placeholder to be replaced with a real name or value
|
The command to remove a file is rm filename.
|
|
AaBbCc123
|
Book titles, new terms, and terms to be emphasized (note that
some emphasized items appear bold online)
|
Read Chapter 6 in the User's Guide.
A cache is a copy that is stored locally.
Do not save the file.
|
Shell Prompts in Command Examples
The following table shows default system prompts and superuser
prompts.
Table P–3 Shell Prompts
|
Shell
|
Prompt
|
|
C shell on UNIX and Linux systems
|
machine_name%
|
|
C shell superuser on UNIX and Linux systems
|
machine_name#
|
|
Bourne shell and Korn shell on UNIX and Linux systems
|
$
|
|
Bourne shell and Korn shell superuser on UNIX and Linux systems
|
#
|
|
Microsoft Windows command line
|
C:\
|
Symbol Conventions
The following table explains symbols that might be used in this
book.
Table P–4 Symbol Conventions
|
Symbol
|
Description
|
Example
|
Meaning
|
|
[ ]
|
Contains optional arguments and command options.
|
ls [-l]
|
The -l option is not required.
|
|
{ | }
|
Contains a set of choices for a required command option.
|
-d {y|n}
|
The -d option requires that you use either
the y argument or the n argument.
|
|
${ }
|
Indicates a variable reference.
|
${com.sun.javaRoot}
|
References the value of the com.sun.javaRoot variable.
|
|
-
|
Joins simultaneous multiple keystrokes.
|
Control-A
|
Press the Control key while you press the A key.
|
|
+
|
Joins consecutive multiple keystrokes.
|
Ctrl+A+N
|
Press the Control key, release it, and then press the subsequent
keys.
|
|
->
|
Indicates menu item selection in a graphical user interface.
|
File -> New -> Templates
|
From the File menu, choose New. From the New submenu, choose
Templates.
|