WLPI: integrating organizations and roles with existing application

Question

Hi,
how do I integrate WLPI's organizations and roles with an existing application's
data structure? It looks like WLPI expects organizations and roles to be groups
with a particular naming convention (i.e. an org is defined by a group 'WLPIOrg@MyOrg'
and a null member). If I am integrating with an application that stores organizations
and roles in (for example) separate database tables, how do I get WLPI to recognize
these? Or do I have to maintain the organizations and roles in 2 places, one for
the application and one for WLPI in the format described above?
THanks,
Martin

Answer 1

Hi Martin,
We're in the middle of a prototyping exercise of getting WLS, JMS,
WLP, WLPI integrated accross one security realm. What its looking like
is this (bear in mind I think this hasn't been tried before judging by
newsgroups + BEA Docs)
1)WLP has a bug that you cannot get user details from LDAP(exception
is thrown)
2)WLPI does need a certain structure -
http://e-docs.bea.com/wlpi/wlpi121/install/cfigrun.htm#1246656
and
http://developer.bea.com/ftp_bin/Using_LDAP_with_WLPI.zip
A) To solve your problem maybe you could write a custom realm to
translate the roles + orgs back (no writing from WLPI ie read only )
to WLPI.
B) Maybe you caould have a META-DIRECTORY set up that synchronises the
RDBMSRealm with something else maybe LDAP or another RDBMSRealm
We are also looking into a unified security solution by Netegrity
called siteminder. They are about to release a version for WLS 6 but
they seem to be laggin behind. This provides a single signon over and
enterprise system.
This is a bit vague Martin, I will hopefully have more concrete info
in a week or 2. If you have any other info you can mail me on -
[email protected]
BTW this wouldn't be Martin Van Vilet from the Netherlands that worked
on the Intelligent Finance Product?
"Martin van Vliet" <[email protected]> wrote in message news:<3b17ece8$[email protected]>...
Hi,
how do I integrate WLPI's organizations and roles with an existing application's
data structure? It looks like WLPI expects organizations and roles to be groups
with a particular naming convention (i.e. an org is defined by a group 'WLPIOrg@MyOrg'
and a null member). If I am integrating with an application that stores organizations
and roles in (for example) separate database tables, how do I get WLPI to recognize
these? Or do I have to maintain the organizations and roles in 2 places, one for
the application and one for WLPI in the format described above?
THanks,
Martin