IWA integration with websphere or logic

Question

Hi,
I was able to integrate and protect websphere sites with Basic Over LDAP Authentication Scheme. But i would like to achieve automatic logon using the IE automatic login authentication option. (Something similar to integrating IIS with IWA Scheme.) Therefore we tried authentication scheme to something similar to IIS IWA Authenciation Scheme using REMOTE_USER as challenge Parameter but it does not work.
Below is the authentication scheme we are using now and we are now facing a problem with the Challenge Parameter Field for the Authentication Scheme. Currently the WAS is using "username" and "password" to logon, so using REMOTE_USER as Challenge Parameter it will not work as i found out that REMOTE_USER is actually sending "domain/username". Is there any Challenge Parameter that i could use to pass "username" only without the domain? I believe that would solve the problem. Or is there any other alternative ways of doing it?
Details for Authentication Scheme_
Name Websphere Authenication Scheme
Description Websphere Authenication Scheme
Level 2
Challenge Method Basic
Challenge Parameter cred:REMOTE_USER
SSL Required No
Challenge Redirect
Enabled Yes
Plugins for Authentication Scheme
credential_mapping: obMappingBase=<"dc=test,dc=ovd">,obMappingFilter="(&(objectclass=inetorgperson)(uid=%REMOTE_USER%))"
Regards,
User

Answer 1

Hi,
thank you for confirming and i understand that. i will need to confirm when you say "Then pass the userid in the HTTP header back to the app just as you would with a normal webgate."
Does that means that upon authenication / authorization success using the ISA reverse-proxy, i will need to return a HTTP header to the webgate, something like this?
Authentication Rule has Action - On Success
Type: HeaderVar
Name: HTTP_REMOTE_USER
Return Attribute: uid
Authorization Rule has Action - On Success
Type: HeaderVar
Name: HTTP_REMOTE_USER
Return Attribute: uid
Thank you
User