Problems with AM and WebLogic 8.1 sp3

Question

Hello,
The following are my environment. (both on Solaris 10)
- Sun AM
- WebLogic 8.1 sp3
I want to try an easy integration between AM and WebLogic. After I installed policy agent for WebLogic and properly configured. It seem to work at some basic level.
When I try to access protected resource on WebLogic. The agent can intercept and redirect to AM's login page where I enter username and password. After I enter correct username and password, it will be redirected back to my protected resource. However, this time I got error 403 forbidden.
I think this is because WebLogic doesn't know that I just already sign-in. There must be something needed to do to map AM's userid to WebLogic id.
But I don't know how.
Could someone give me some suggestion or point me to some documents? Thanks in advance.

Answer 1

I meant creating a policy in the SAM web interface, where you can add the required rule (specifying resource) and the subjects to whom the policy is applicable.
Of course, if you are using J2EE_POLICY, the URL policy is of no consequence. The best practice is to use amFilter.mode = ALL, where the J2EE policies are enforced and verified by the application / app server, and the URL's are protected by SAM as well. In that case, the user has to be authorized by both SAM as well as J2EE to access the application.
This, of course, is subject to the "best of my knowledge" clause!