10
5. Click New, provide a user name (sasdemo) and password, and click OK.
6. Click the link for the new user account, and click Groups.
7. Select SASUsers from the list of available groups, use the right-arrow icon to assign the user to
the group, and click Save.
Using Other Authentication Providers
If the example of using the internal LDAP services does not apply to your situation, see your
WebLogic documentation for information about the authentication providers that you should use.
Some situations might require using more than one provider. See your WebLogic documentation
also for information about changing the order of the authentication providers and control flags. In
most cases, the SAS Web authentication provider should appear last in the list of providers and also
have a control flag of OPTIONAL.
In order for the SAS Web authentication provider to execute, the other providers before it must have
a control flag of OPTIONAL or REQUIRED. If you set the control flag for an authentication provider
to SUFFICIENT, and it is executed earlier than the SAS Web authentication provider, then this setting
prevents the SAS Web authentication provider from executing. Access through the SAS Logon
Manager will fail. At least one authentication provider must have a control flag of REQUIRED (such
as an LDAP or Active Directory provider) to prevent access by unauthenticated users. If an
authentication provider is marked as REQUIRED, the WebLogic administrator credentials must be
available in the user registry for that provider.
There are many ways to configure the authentication order. In general, if you are trying to
authenticate to a third party such as LDAP, that provider should be first. Below is a sample for the
authentication order and control flag values when you use a third party LDAP.
ThirdPartyLDAP Control Flag=Required
DefaultAuthenticator Control Flag=Optional
DefaultIndentityAsserter No Control Flag
SASTrustedAuthenticator Control Flag=Optional
To verify the control flag values, you need to click on each authentication provider.
Kommentare zu diesen Handbüchern