Single sign-on and different usernames and passwords

Hello,
I am building a Portal with WLPS 3.5 and WLS 6.0. I tried to get
information about the background of single sign-on.
I understand, that I need a Realm (i.e. LDAP Realm) to authenticate the
user for the first login to the portal (with username and password).
Now I would like to integrate my webmail-programm (to get emails from
Lotus Notes via Internet) as a portlet.
For my understanding the user has to authorizate to get access to webmail.
Therefore I create a ACL for webmail and this ACL is assigned to my
security Realm.
I would like the portlet to show after login the number of mails for the
specific user. But where are the username and password for webmail stored
and how are they received and forwarded?
I understand that my ACL included all users that have access to webmail
(i.e. all users). But I only want emails for the specific user.
Does WLS get all usernames and passwords while the first login? Do I have to
implement a algorithmen to get the specific username and password for the
requested resource in my portlet?
Has anyone solved a similar problem or can tell me where I can get more
information. I read the WebLogic Security document but I cant find a
answer to my questions.
Thanks
Lydia

Lydia,
I'm not an expert in this area, but I can give you a start.
As for single sign-on, there are different levels. For single sign-on across web-apps,
the servlet spec requires this (section 12.6 of th 2.3 spec) and therefore Weblogic
does this.
What you are talking about is single sign-on across back-end applications through
a web-app. BEA has partnered with Securant (just acquired by RSA) to provide this
kind of functionality. Browse to http://www.rsasecurity.com/products/ and look
at the ClearTrust product. BEA has also partnered with Netegrity (www.netegrity.com)
with their SiteMinder product. Neither is included in the Weblogic license. I'm
sure either vendor would be excited to explain how their product will solve your
problem if you give them a call.
As for where the username and passwords are stored, that is up to the realm. If
you are using the default WLPS RDBMSRealm, the username and encrypted password
are stored in the WLCS_USER table. If you are using LDAPRealm, they are stored
in your LDAP server.
Hope this was useful!
PJL
[email protected] wrote:
Hello,
I am using PersonalizationServer 3.5 and WLS 6.0 SP 2.
Now I try to unterstand the functionality of Single sign-on when a user
has different usernames and passwords for different applications.
Can someone explain where the usernames and passwords for a user are
stored (all in the LDAP-realm or a RDBMS-realm?) When a user access the
application how username and passwords are mapped? Or usernames and
passwords for all applications are the same and will be equalized?
Precisely I would like to get access to a mail-account for a specific
user
(webmail from Lotus Notes).
Thanks for any help
Lydia

Similar Messages

  • When I launch Firefox 4.0.1 I get an error message that says "We noticed your may have signed inor signed out in another window. Click Ok to reload your page." I have to sign in with my username and password. Richard

    When I launch Firefox 4.0.1 I get an error message that says "We noticed your may have signed inor signed out in another window. Click Ok to reload your page." I deleted Firefox and reloaded it - did not solve the problem. This started occurring after I downloaded Windows Service Pack 2. I have Vista 7 OS. So every time I close and relaunch Firefox, I have to sign in with my username and password. Very very, annoying. If I can't get this corrected, I have to start using another Browser. Thanks for your help. Richard

    It is possible that there is a problem with the files sessionstore.js and sessionstore.bak in the Firefox Profile Folder.
    Delete the files sessionstore.js and sessionstore.bak in the Firefox Profile Folder.
    * Help > Troubleshooting Information > Profile Directory: Open Containing Folder
    * http://kb.mozillazine.org/Profile_folder_-_Firefox
    * http://kb.mozillazine.org/sessionstore.js
    If you see files sessionstore-##.js with a number in the left part of the name like sessionstore-1.js then delete those as well.<br />
    Deleting sessionstore.js will cause App Tabs and Tab Groups to get lost, so you will have to create them again (make a note).
    See:
    * http://kb.mozillazine.org/Session_Restore

  • I have published two different blogs with different usernames and passwords

    I have published two different blogs with different usernames and passwords. When I want to publish one, it goes through the whole process of publishing the other blog as well - and takes too long.
    How can I publish each blog separately?

    I have published two different blogs
    I think you need to ask in the iWeb forum rather than this one (for iWork/Numbers):
    http://discussions.apple.com/forum.jspa?forumID=1309

  • You do not have access to the printer. use a different username and password - is there a fix?

    Purchased this last night. Difficulty installing and now able to install. Get to the part where you need to put in your username and password. Then I get the you don't have access to printer error. my username and password is correct as I can sign in just fine.
    Windows 7 Pro
    AD014301562
    Advise with a fix as I need to get work done. Not sure why this has been do difficult. If this cannot be resolved I need a refund.
    Thanks
    Tom

    Hi tseymour65,
    Please refer to this FAQ link:Adobe CreatePDF Desktop Printer is no longer available
    Regards,
    Florence

  • I have 3 different accounts and passwords for Apple. 1 for iTunes, 1 for iCloud, and 1 for my iCloud email. It is annoying to remember these 3 different usernames and passwords. Can I make all 3 accounts the same username and password?

    I would like to use my iCloud email address as the username.
    Is this possible?

    No.  Apple will not merge Apple IDs, and you can't use the same username and password for multiple IDs.

  • Have same username and password for Apple and iCloud. Main email server is btinternet with different username and password. When I try to share a photo using iCloud email I get message that "email server didn't recognise username/password combo". Help.

    I have the same username and password for my Apple account and iCloud. My main email server is btinternet. When I try to share a photo by sending an email by iCloud I get a message "Server doesn't recognize username/password combination". Do I need to login to iCloud with my btinternet password?

    Seeing others with same problem I have gone into iPhoto>Preferences>Accounts and changed password to btinternet password. It worked. Thanks.

  • Single Sign-on with Multiple Servlets and JSPs

    I am in the midst of attempting to logically tie together a number of our
              web applications under a single sign-on "umbrella". What we want is the
              following: for any n applications a user may have access rights for up to n
              of them. Once signed in, she has rights to visit any app to which she has
              permissions as long as her session is valid. Unfortunately, I'm having
              trouble seeing how to make this work given the documentation that I have.
              I've read thru the newsgroup in search of a solution, but I haven't seen
              anything geared toward this specific approach.
              Currently, each "application" (servlet) has a list of valid users via ACLs
              (we've implemented a RealmExtender, so we're not going via props file
              entries), and we let the browser pop-up window enforce the sign-on. This
              has worked exactly as we wish (single sign-on, etc.), for testing, but we'd
              really rather have our own form-based sign-on for production.
              To that end, we've done the following:
              1) implemented a JSP form-based sign-on (basically ripped off from the
              example provided by BEA), which does a "ServletAuthentication.weak()" check
              to confirm identity.
              2) placed the following code (essentially) within the service() method of
              our servlet superclass, which I thought would force another check. My
              intention is to disallow the user from "jumping into" an app thru a
              shortcut, and thereby bypassing security.
              HttpSession session = request.getSession(true);
              if (session.isNew()) {
              response.sendRedirect(welcomeURL);
              However, we can't get the form-based approach to mimic the functionality of
              the default browser pop-up: the sign-in doesn't seem to "follow" the user
              the way it did with the pop-up. Instead, when I come in thru our login
              page, the browser pop-up is still appearing when I click the link for an
              app for which to which I have permissions.
              Is the default browser pop-up doing something different that I should know
              about? Seems like this should be simple to do, but it's surprisingly subtle
              (or maybe I'm just clueless).
              TIA
              

    Well, if you want to hear my personal opinion:
    better stick to the cookie specification (http://wp.netscape.com/newsref/std/cookie_spec.html) and accept the constraint that cookies will only be send to domains that tail-match the domain-constraint specified in the set-cookie http response.
    Although this specification is not an official internet standard most browsers are implementing the cookie mechanism according to this specification.
    Unfortenately there's no option to specify that a cookie should be send to a list of servers and/or sub-domains.
    However one physical server can have multiple (FQDN) hostnames. So if you intend to send the cookie to a group of servers the best approach is to create a new (DNS) (sub-)domain exclusively for those servers.
    Theoretically (and also practically) it is possible to set cookies for multiple domains (by using a webservice that will set cookies on request of a caller). But that approach is dangerous:
    (1) not the server but the http client is defining the content of the cookie (= part of the http server response)
    (2) (unintended) many servers can obtain the cookie which will be send to all servers that reside in all (tail-matching sub-)domains; although most likely only one or two servers of each domain are intended recipients
    Regards, Wolfgang

  • ADFS single sign-on with office 365 and multiple forests

    I have 2 forests with one of them (Forest A) only running Exchange / Office 365 in hybrid mode. The other forest (Forest B) has my AD accounts for everyday user login and work. Is there a way to set up ADFS between these 2 forests in order for Forest B
    to achieve single sign-on to office 365? Today users have to login with separate office 365 accounts in order to access email and sharepoint. Short of migrating Forest A into Forest B and getting down to one forest / domain, is there anything else we can do
    to achieve single sign-on?

    Hi,
    Based on my research, we can have one ADFS farm servicing multiple forests, here are some related articles below for your references:
    Multi-forest and Multi-tenant scenarios with Office 365
    http://blogs.technet.com/b/educloud/archive/2013/08/02/multi-forest-and-multi-tenant-scenarios-with-office-365.aspx
    Hybrid Deployment Prerequisites
    http://technet.microsoft.com/en-us/library/hh534377(v=exchg.150).aspx
    SupportMultipleDomain switch, when managing SSO to Office 365
    http://blogs.technet.com/b/abizerh/archive/2013/02/06/supportmultipledomain-switch-when-managing-sso-to-office-365.aspx
    For more information about Office 365, I suggest you refer to Office 365 community below:
    http://community.office365.com/en-us/f/default.aspx
    Best Regards,
    Amy

  • Copying files from local computer to a remote server which is not in Domain and with username and password?

    "I have one workstation with static IP, Wants to create batch file to log in to this,using user name and password, copy back up files from that workstation to my desktop with batch file, please help
    I am currently using batch file for back up for domain servers with robocopy commands in batch file  but one of the workstation is not in domain and has static ip , also it has username and password,
    Wants to create batch file on my desktop to log in this server---with username and password,, copy files from particular folder and paste it on my desktop in particular folder or auto create that folder,
    please help, "
    P Dave

    JRV,
    I can understand that, 1stly I am not a scripting guy, I know very very basic of this,
    2ndly, I need help , I am not asking anyone here to write code for me, I have already wrote that but its not doing which its suppose to do,
    check below screen shot, after running suggested script, it has mapped drive ,
    now I do not want to do that, I want just files to copy from that machine to my machine, and want script which I can run from any PC,
    Tried with UNC PATH as well, but not making any difference, its keep mapping that server drive to my computer
    P Dave
    JRV,
    I can understand that, 1stly I am not a scripting guy, I know very very basic of this,
    2ndly, I need help , I am not asking anyone here to write code for me, I have already wrote that but its not doing which its suppose to do,
    check below screen shot, after running suggested script, it has mapped drive ,
    now I do not want to do that, I want just files to copy from that machine to my machine, and want script which I can run from any PC,
    Tried with UNC PATH as well, but not making any difference, its keep mapping that server drive to my computer
    P Dave
    Bill - he still sees that "connection" although it isn't mapped it is attached temporarily.
    P - Log off and log back on and the attached connection will be gone.  It is temporary.   Again - knowing the basics of WIndows would let you know this.
    We have given you all of the answers that are possible.  There is no other way unless you have installed things like PowerShell and PowerShell remoting or an FTP server.
    If you do use a drive it can be just as easily deleted after you have finished the copy.
    Again: "NET USE /?" will tell you all of the options.
    Saying you know nothing is not an excuse for not thinking or looking more deeply into the suggestions made by those trying to help you.  This is not a MIcrosoft support forum or help desk.  It is a forum for admiinistrative scripting and assumes
    that those coming here are technically trained or experienced in the basics of Windows technology.
    ¯\_(ツ)_/¯

  • I cant backup my iphone as it says completely different username and passcode when i try and login

    Ya... not sure whats going on
    Kinda confused
    when i try and login with my email and passcode it prompts me to someone elses username and passcode
    starting to get really upset as i need my contacts and photos.....................

    i also face the same problem. i have updated my i phone 4 to ios 7.0.4 and i tune 11.1 .when i start back up now on i tunes though it started to back up some apps but it shows the msg that back up is corrupt

  • My ipad 3 stopped charging, not the adapter and reboot doesn't do anything.  I've tried all the tricks and different adapters and now my nearest Apple store is saying it just doesn't work and it'll be $300 to replace.  Only had it 1 yr and half.

    My ipad 3 suddenly stopped charging last week.  I've tried different adapters, to no avail.  I didn't drop it or spill anything on it.  I don't have tons of apps, so plenty of memory.  My husband took it to the Apple store for me and they tried charging it too even though I knew that wasn't the problem and then said it wasn't working (no kidding) and then told him it would be $300 to replace.  Seeing as I've only had it for a year and a half and it cost more than twice that to begin with, I'm a little ticked that it stops charging, a problem I know is very common according the all the message boards and they want to charge me $300.  I've always heard that Apple was so good to it's customers, but my iphone has been a nightmare, and now my ipad won't charge.  Also, I've tried the reset options I've read about and none worked.  Sorry, just really upset.  I thought I was paying all this money for better quality and now I feel foolish for having done so.  Anybody with any ideas I, or the genius at Apple haven't thought of?  Help is appreciated.  Thanks.

    May be some help on one of these links.
    Could be the charger, cable or iPad. Plug the USB cable into your computer. It may say "Not Charging", however, it is charging slowly and will verify that the cable is good.
    Try this first - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.)
    The quickest way (and really the only way) to charge your iPad is with the included 10W or 12W (5W on Mini) USB Power Adapter. iPad will also charge, although more slowly, when attached to a computer with a high-power USB port (many recent Mac computers) or with an iPhone Power Adapter (5W). When attached to a computer via a standard USB port (2.5W, most PCs or older Mac computers) iPad will charge very slowly (but iPad indicates not charging). Make sure your computer is on while charging iPad via USB. If iPad is connected to a computer that’s turned off or is in sleep or standby mode, the iPad battery will continue to drain.
    Apple recommends that once a month you let the iPad fully discharge & then recharge to 100%.
    How to Calibrate Your Mac, iPhone, or iPad Battery
    http://www.macblend.com/how-to-calibrate-your-mac-iphone-or-ipad-battery/
    At this link http://www.tomshardware.com/reviews/galaxy-tab-android-tablet,3014-11.html , tests show that the iPad 2 battery (25 watt-hours) will charge to 90% in 3 hours 1 minute. It will charge to 100% in 4 hours 2 minutes. The new iPad has a larger capacity battery (42 watt-hours), so using the 10W charger will obviously take longer. If you are using your iPad while charging, it will take even longer. It's best to turn your new iPad OFF and charge over night. Also look at The iPad's charging challenge explained http://www.macworld.com/article/1150356/ipadcharging.html
    Also, if you have a 3rd generation iPad, look at
    Apple: iPad Battery Nothing to Get Charged Up About
    http://allthingsd.com/20120327/apple-ipad-battery-nothing-to-get-charged-up-abou t/
    Apple Explains New iPad's Continued Charging Beyond 100% Battery Level
    http://www.macrumors.com/2012/03/27/apple-explains-new-ipads-continued-charging- beyond-100-battery-level/
    New iPad Takes Much Longer to Charge Than iPad 2
    http://www.iphonehacks.com/2012/03/new-ipad-takes-much-longer-to-charge-than-ipa d-2.html
    Apple Batteries - iPad http://www.apple.com/batteries/ipad.html
    iPhone: Hardware troubleshooting (Power/Battery section also applies to iPad)
    http://support.apple.com/kb/TS2802
    Extend iPad Battery Life (Look at pjl123 comment)
    https://discussions.apple.com/thread/3921324?tstart=30
    iOS 7 Battery Life Draining Too Fast? It’s Easy to Fix
    http://osxdaily.com/2013/09/19/ios-7-battery-life-fix/
    New iPad Slow to Recharge, Barely Charges During Use
    http://www.pcworld.com/article/252326/new_ipad_slow_to_recharge_barely_charges_d uring_use.html
    iPad: Charging the battery
    http://support.apple.com/kb/HT4060
    Best Practices for iPad Battery Charging
    http://www.ilounge.com/index.php/articles/comments/best-practices-for-ipad-batte ry-charging/
    How to Save and Prolong the battery life of your new ipad
    https://discussions.apple.com/thread/4480944?tstart=0
    Prolong battery lifespan for iPad / iPad 2 / iPad 3: charging tips
    http://thehowto.wikidot.com/prolong-battery-lifespan-for-ipad
    iPhone, iPod, Using the iPad Charger
    http://support.apple.com/kb/HT4327
    Install and use Battery Doctor HD
    http://itunes.apple.com/tw/app/battery-doctor-hd/id459702901?mt=8
    To Extend a Device’s Battery Life, Get to Know It Better
    http://tinyurl.com/b67c7xz
    iPad Battery Replacement
    http://www.apple.com/batteries/replacements.html
    In rare instances when using the Camera Connection Kit, you may notice that iPad does not charge after using the Camera Connection Kit. Disconnecting and reconnecting the iPad from the charger will resolve this issue.
     Cheers, Tom

  • How can my husband and I sync our iphones using one computer? We each have separate itunes accounts, and different contacts and apps.

    How do I sync multiple iphones with one computer? My husband and I have separate itunes accounts, as well as different contacts and apps.

    Sorry, wrong link:
    How to use multiple iPods, iPads, or iPhones with one computer

  • How to create a login funtion with different usernames and password to iweb

    Hi,
    Im looking for hours for a solution to create / add a function to iweb which allows users to login to a member area with their own user names and passwords.
    Is there a simple way to realize this? So far I know there has to be a file with all the user name --> password combinations, can I add such a file to my idisk and then get it working with my iweb site?
    Is such an idea in general possible with iweb?
    Thanks for your help!
    Message was edited by: Macusar08

    One possibility may be to use the free drop.io to privately share links to your iWeb site pages and/or iDisk files. +"Each 'drop' (...) can be password-protected and set to expire after a period of time, so you can share exactly what you want with whom you want for as long as you want."+ (source).
    Note that drop.io doesn't require an email address, name or personal registration to set up a "drop". And you can place data in either one drop or multiple drops. Each drop comes with 100mb of storage for free and you can have as many drops as you want without signing up.

  • I lost my google and facebook username and passwords when i upgraded firefox 3.o to firefox 10.0.2 it saved all username and passwords of other websites except these two

    Today i Upgraded 10.0.2 with my older version after upgradation i started the firefox all my saved passwords are showed in saved password except the passwords from gmail and facebook when i checked the exceptions it shows those passwords will not be saved

    Solved THANK YOU!!!!

  • Open safari and enter username and password into opening login page

    I have managed to alter pictures in iphoto and photoshop but I am struggling to sort this one out. Initially it seems simple but I just cannit figure it out.
    Can anyone help?
    Mark

    Hey Prion- Glad It works. I promise that its really not too technical. It may seem like a lot of code but it just insures that it runs properly every time. I don't know if you're interested, but here's a description of what each part does...
    tell application "Safari"
    activate
    ---Tell safari to open...
    make new document
    set URL of document 1 to "https://email.ntwsha.co.uk"
    --- Make a new window with the above address...
    end tell
    if page_loaded(10) then
    ---This line says "If the action 'page_loaded' is complete and true then con't this section." See the "On page_loaded" below to see what it does...
    tell application "System Events"
    ---Send an action to the system (this could be any type of GUI scripting)...
    keystroke "account"
    delay 1
    keystroke tab
    delay 1
    keystroke "password"
    delay 1
    keystroke return
    ---Self-explanatory- I put in the delay to allow the page to react after tab is pressed...
    end tell
    else
    ---if page_loaded has not completed within the timeout period or returns false then...
    display alert "The URL Has Not Loaded."
    end if
    on pageloaded(timeoutvalue)
    ---when page_loaded is called upon do the rest below...
    delay 2
    repeat with i from 1 to the timeout_value
    ---Repeat the following command until the time reaches the timeout_value (10)...
    tell application "Safari"
    if (do JavaScript "document.readyState" in document 1) is "complete" then
    return true
    ---Tells safari to check if the page has finished loading. If yes, return true, if no-repeat...
    else if i is the timeout_value then
    return false
    If the timeout_value is reached (10 secs) and the page has still not finished, then return false...
    end if
    delay 1
    end tell
    end repeat
    end page_loaded
    So its really not that technical of a language. In fact, its one of the closest to english as far as computer languages go. Its a pretty good asset to learn, because pretty much everything you could want to do in automator, would be possible in applescript. And if you aren't real interested, no big deal. Just thought you want to know how the script worked. Good Luck!
    --Justin S.

Maybe you are looking for

  • Unable to install 6.0.2 on Windows XP

    Hi, During installation of TimesTen 6.0.2 on Windows XP I got the following error: "Unable to create the registry key ,SOFTWARE\TimesTen" I did a "Typical" installation and just clicked Next in every dialog. I tryed to install the Oracle Times Ten In

  • Password Protected Wireless Network with Unknown Password

    I have a Linksys WRTP54G wireless router for internet access with my laptop pc. It was installed by a local computer tech (who is no longer accessible) several years ago with my Gateway desktop computer which has Windows 98 for an operating system. I

  • How to get values of all input text of a form?

    Hi, I would like to know how to get all input text value of a form? I try this:         List values = new ArrayList();          values = getBindings().getAttributeBindings();          for (Iterator iterator = values.iterator(); iterator.hasNext();) {

  • GUI_DOWNLOAD  "BIN"  filetype in Browser not working

    Hi , I am downloading an internal table with XML data using GUI_DOWNLOAD  and FILETYPE as BIN. This is not working in the SRM browser Please let me know if anyone has any idea on this Thanks Sekhar J

  • How can I use the HDMI through input thunderbolt?

    I have a fire stick TV from Amazon I would like to use it on my macbook pro retina .