You can configure which realms to grant inbound trust to for multiple security domains. The trust relationship between realms is used when communicating with Lightweight Third-Party Authentication (LTPA) tokens. Once a LTPA token is decrypted by the receiving server, the realm in the token is checked to see if it is trusted. If it is not, the validation of the token fails. A realm represents a user registry in WebSphere® Application Server.
Only users assigned to the administrator role can configure multiple security domains. Enable global security in your environment before configuring multiple security domains.
Perform the following steps to grant inbound trusted realms for multiple security domains using the administrative console:
The realms you selected to trust accept messages from other trusted realms but do not accept messages from untrusted realms. Select Add External Realm to add trust for realms that are external to this cell.