WebSphere Application Server Network Deployment, Version 6.0.x   Operating Systems: AIX, HP-UX, Linux, Solaris, Windows
             [TIP: Focusing the table of contents and search results]

Configuring the server to handle LTPA token authentication information

Lightweight Third-Party Authentication (LTPA) is a type of authentication mechanism in WebSphere Application Server security that defines a particular token format. The purpose of the LTPA token authentication is to flow the LTPA token from the first Web service, which authenticated the originating client, to the downstream Web service. You can configure the server for LTPA token authentication.

About this task

Important: There is an important distinction between Version 5.x and Version 6.0.x and later applications. The information in this article supports Version 5.x applications only that are used with WebSphere Application Server Version 6.0.x and later. The information does not apply to Version 6.0.x and later applications.

This task is used to configure LTPA. Do not attempt to configure LTPA from a pure client. After the downstream Web service receives the LTPA token, it validates the token to verify that the token has not been modified and has not expired. For validation to be successful, the LTPA keys that are used by both the sending and receiving servers must be the same.

Complete the following steps to specify that LTPA is the authentication method. The authentication method indicated in these steps must match the authentication method that is specified for the client.

Procedure

  1. Launch an assembly tool. For more information on the assembly tools, see Assembly tools .
  2. Switch to the Java 2 Platform, Enterprise Edition (J2EE) perspective. Click Window > Open Perspective > J2EE.
  3. Click EJB Projects > application_name > ejbModule > META-INF.
  4. Right-click the webservices.xml file, and click Open with > Web services editor.
  5. Click the Extensions tab, which is located at the bottom of the Web services editor within the assembly tool.
  6. Expand the Request receiver service configuration details > Login configuration section. You can select from the following options:
    • BasicAuth
    • Signature
    • ID assertion
    • LTPA
  7. Select LTPA to authenticate the client using the LTPA token received from the request.

What to do next

After you specify the authentication method, you must specify the information that the server must validate. See Configuring the server to validate LTPA token authentication information for more information.



Related concepts
Lightweight Third Party Authentication
Related tasks
Configuring the server to validate LTPA token authentication information
Configuring the server security bindings using an assembly tool
Configuring the server security bindings using the administrative console
Configuring the client for LTPA token authentication: specifying LTPA token authentication
Configuring the client for LTPA token authentication: collecting the authentication method information
Securing Web services for version 5.x applications using a pluggable token
Task topic    

Terms of Use | Feedback

Last updated: Mar 8, 2007 8:14:28 PM CST
http://publib.boulder.ibm.com/infocenter/wasinfo/v6r0/index.jsp?topic=/com.ibm.websphere.nd.doc/info/ae/ae/twbs_confsvrltpaauthmeth.html

© Copyright IBM Corporation 2004, 2006. All Rights Reserved.
This information center is powered by Eclipse technology. (http://www.eclipse.org)