IBM Tivoli Federated Identity Manager Business Gateway V6.1 adds single Business Partner licenseIBM United States Software Announcement 207-134
June 5, 2007
|Table of contents||Document options|
|At a glance|
IBM Tivoli Federated Identity Manager Business Gateway (TFIM Business Gateway) V6.1 includes:
- Entry-level collaboration solution for single Business Partner federation
- Scalable pricing for entry-level as well as expanding federations
- Federated single sign-on with Business Partners to help improve user experience and reduce user administration costs
- Loose coupling between the federation software and business applications to help minimize on-going maintenance costs
- Small infrastructure footprint to enable faster deployment
For ordering, contact:
Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at
Back to top
Collaboration with customers, Business Partners, agents, or providers often plays a key role in the Business Process Management initiatives motivating a move towards a service-oriented architecture (SOA). Browser-based integration with these external organizations, and basing the integration on open standards for federated single sign-on, can provide quick gains in user productivity and experience, while also providing opportunities for reducing user administration costs.
IBM Tivoli® Federated Identity Manager Business Gateway (TFIM Business Gateway) provides an entry-level collaboration solution option for small-to-medium enterprises to federate with one Business Partner, as well as scale this low infrastructure option for multiple Business Partners, and department and project-focused federation solutions. TFIM Business Gateway does not rely on proprietary APIs that tightly bind business applications to the federation software. The loose coupling between TFIM-Business Gateway and business applications provides fast deployment times and can reduce ongoing maintenance costs.
V6.1 of TFIM Business Gateway offers a Single Business Partner license (D6123LL) for TFIM Business Gateway for use restricted to a single connection with another Business Partner's Federated Identity Manager. This Single Business Partner license offers you a low cost solution. For connections with multiple partners, the previously announced TFIM Business Gateway license (D59UYLL) must be purchased. If you purchase Single Business Partner license (D6123LL), you may trade up to D59UYLL with trade up license D612PLL.
For those enterprises that later grow their federation needs, TFIM Business Gateway provides an easy migration path to the enterprise-level TFIM offering, with little or no application changes, and a consistent management user interface.
|Planned availability date|
June 5, 2007: Media and documentation
Back to top
Entry-level federation solution
TFIM Business Gateway is an entry-level solution for federated single sign-on. It can be used by the Business Partners of a larger enterprise running an enterprise TFIM solution, but TFIM Business Gateway can also be used by Business Partners of companies using third-party federated single sign-on products.
In addition to federated single sign-on functionality, the enterprise TFIM product also includes solutions for service oriented architecture (SOA) Security and Federated Provisioning. The federated single sign-on functionality in the enterprise TFIM solution is integrated with IBM Tivoli Access Manager for e-business, which can greatly simplify application integration functionality for a federated single sign-on environment. The enterprise TFIM solution also provides built-in session management, authorization, and strong authentication capabilities that are well suited to an enterprise-level federated single sign-on solution. Examples of the types of business entities that would deploy TFIM Business Gateway include:
- Insurance and mortgage brokerages
- Health care providers
- Supply chain providers
- Branch offices of government and law enforcement organizations
- Employers leveraging employee-benefit outsourcing
- Small to medium-sized partners of large enterprises
Loose coupling with business applications
An important aspect of deployment and maintainability of federated single sign-on solutions is the method by which the federation software integrates with and provides single sign-on to the business applications.
Use of proprietary APIs can not only tie a federation solution to a specific vendor, but these APIs also can increase testing times, and increase the ongoing maintenance required as standards continue to evolve and new platform revisions are released. TFIM Business Gateway uses standards-based APIs and is built with the view to maintain the same loose coupling between the federation software and the business applications that is achieved with the enterprise-level TFIM solution. This can greatly reduce the time to value for the federation solution.
Smooth migration to enterprise-level federation
Even in large organizations, many federation solutions begin with a business requirement to provide federated single sign-on for a single application, and typically a small number of federation partners. As with earlier intra-domain single sign-on solutions, the success of the initial project can typically lead to a rapid growth in the number of applications and the size and types of user populations involved.
In some cases, an enterprise-level vision might drive the deployment of a full federation infrastructure capable of supporting the envisaged future deployment scope. However, it is equally common for an initial federated single sign-on project to have a quite narrow scope and budget.
This may limit the ability to deploy an enterprise-level infrastructure. In these cases, an entry-level solution with a smooth migration path to an enterprise-level solution may be appropriate.
The TFIM Business Gateway solution was developed so that it could be readily migrated to the enterprise solution as and when required. The result is a smooth migration path from TFIM Business Gateway to the enterprise-level TFIM solution, with little or no business application changes. Moreover, both solutions use a consistent management user interface, so administration training and transition costs are minimized.
Management and audit
TFIM Business Gateway leverages the IBM Integrated Solutions Console (ISC) to provide a Web-based administrative console that combines management of TFIM Business Gateway's services into one location. TFIM Business Gateway can also be managed via Jython scripts, which can be used to automate site-specific administration tasks.
TFIM Business Gateway logs audit records for all management and runtime federation events in an XML format that facilitates integration with various reporting tools.
Section 508 of the U.S. Rehabilitation Act
Tivoli Federated Identity Manager Business Gateway is capable as of June 5, 2007, when used in accordance with IBM's associated documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act, provided that any assistive technology used with the product properly interoperates with it. A U.S. Section 508 Voluntary Product Accessibility Template (VPAT), containing details on the products accessibility compliance, can be requested at
Availability of national languages
Tivoli Federated Identity Manager Business Gateway is enabled for worldwide availability on the dates shown below:
General availability Product description Language date TFIM Business Multilingual November 24, 2006 Gateway V6.1.0 (French, Russian, Arabic, Korean, Chinese -- Simplified, Spanish, Portuguese-Brazilian, German, Japanese, Chinese -- Traditional, Hungarian, English, Czech, Italian, Polish)
Back to top
The following English publications may be downloaded, at planned general availability, from the following Web site
National language publications be may be downloaded 60 days after planned general availability from the same Web site.
- Administration Guide
- Error Message Reference
- Auditing Guide
- Problem Determination Guide
No publications are shipped with this product.
Back to top
Specified operating environment
Minimum and recommended processor, disk space, and memory requirements for IBM Tivoli Federated Identity Manager Business Gateway V6.1 include:
Minimum Recommended Processor 300 MHz 400 MHz Disk Space 1 GB 1.5 GB Memory 1 GB 1.5 GB
Tivoli Federated Identity Manager Business Gateway V6.1 supports the following:
- IBM AIX® (32 bit) V5.2 and V5.3
- Sun Solaris 9 (Sparc) and 10 (Sparc)
- Microsoft Windows 2003 Standard Server and Enterprise Server
- Red Hat Linux Advanced Server 3.0 and Fixpack 3 for System x
- Red Hat Linux Advanced Server 4.0 for System z
- SUSE Linux Enterprise Server 9 for IBM System x (32 bit)
- SUSE Linux Enterprise Server 9 for IBM System z (31-bit native and 31-bit compatibility mode in 64-bit native)
- Security Assertion Markup Language (SAML) 1.0 and 1.1
- Internet Information Services (IIS) V6.0
- WebSphere® Application Server V6.1
Included with the program package, for use restricted to IBM Tivoli Federated Identity Manager Business Gateway V6.1, is an embedded version of WebSphere Application Server V6.1.
Software Maintenance is included with licenses purchased through Passport Advantage® and Passport Advantage Express. Installation and technical support is provided by the Software Maintenance offering of the IBM International Passport Advantage Agreement. This fee service enhances your productivity, with voice and electronic access into IBM support organizations.
IBM Tivoli Federated Identity Manager Business Gateway V6.1 is distributed with:
- International Program License Agreement (Z125-3301)
- License Information document
- Quick Start Guide
- CD-ROM media
- Publications (refer to the Publications section)
Security, auditability, and control
IBM Tivoli Federated Identity Manager Business Gateway uses the security and auditability features of the operating system software.
The customer is responsible for evaluation, selection, and implementation of security features,
administrative procedures, and appropriate controls in application systems and communication
Back to top
IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an unmatched portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support any critical business need.
To learn more about IBM Software Services or to contact a Software Services sales specialist, visit
To locate an IBM Business Partner, visit
IBM Tivoli Enhanced Value-Based Pricing terminology
IBM Tivoli Enhanced Value-Based Pricing: IBM Tivoli software products are priced using IBM Tivoli Enhanced Value-Based Pricing. The Enhanced Value-Based Pricing system is based upon the IBM Tivoli Environment-Managed Licensing Model, which uses a managed-environment approach whereby price is determined by what is managed rather than the number and type of product components installed.
For example, all servers monitored with the IBM Tivoli Monitoring product require entitlements sufficient for those servers. Other IBM Tivoli products may manage clients, client devices, agents, network nodes, users, or other items, and are licensed and priced accordingly.
Unlike typical systems management licensing models that require entitlements of specific software components to specific systems, the IBM Tivoli Environment-Managed Licensing Model provides you with the flexibility to deploy IBM Tivoli software products within its environment in a manner that can address and respond to your evolving architecture. That is, as the architecture of your environment changes, your implementation of IBM Tivoli software can be altered, as needed, without affecting your license requirements (as long as you do not exceed your entitlements to the software).
Under Enhanced Value-Based Pricing, licensing and pricing of server-oriented applications are determined based upon the server's use in your environment. Typically, such applications are licensed and priced in a manner that corresponds to each installed and activated processor of the server managed by the IBM Tivoli application to help correlate price to value, while offering a simple solution.
Where a server is physically partitioned, this approach is modified. This partitioning technique is the approach used with systems that have either multiple cards or multiple frames, each of which can be configured independently. For servers capable of physical partitioning (for example, IBM eServer® pSeries® Scalable POWERparallel® Systems servers, Sun Ultra servers, and HP Superdome servers), an entitlement is required for each processor in the physical partition being managed by the IBM Tivoli application. For example, assume that a server has 24 processors installed in aggregate. If this server is not partitioned, entitlements are required for all 24 processors. If, however, it is physically partitioned into three partitions each containing eight processors, and Tivoli products were managing only one of the three partitions, then entitlements would be required for the eight processors on the physical partition managed by the IBM Tivoli application.
For servers with virtual or logical partitions, entitlements are required for all installed and activated processors on the server. For each IBM Tivoli application managing a clustered environment, licensing is based on the cumulative number of installed and activated processors on each server in the cluster for each IBM Tivoli application managing the cluster. Where the cluster includes physically partitioned servers, the considerations described above concerning physically partitioned servers apply as well.
Enhanced Value-Based Pricing recognizes the convergence of RISC and UNIX®, and Microsoft Windows and Intel® technologies, in order to simplify your licensing requirements, and to provide a smoother, more scalable model. Pricing and licensing does not differentiate between non-zSeries® server platforms or operating systems. For some products, this platform neutrality extends to zSeries and other host servers as well.
IBM Tivoli Enhanced Value-Based Pricing terminology definitions
A server is a computer system that executes requested procedures, commands, or applications to one or more user or client devices over a network. A Proof of Entitlement (PoE) must be obtained for each server on which the program, or a component of the program, is run or which the program manages.
Standby or backup systems
For programs running or resident on backup machines, IBM defines three types of situations: cold, warm, and hot. In the cold and warm situations, a separate entitlement for the copy on the backup machine is normally not required and typically no additional charge applies. In a hot backup situation, you need to acquire another license or entitlements sufficient for that server. All programs running in backup mode must be solely under your control, even if they are running at another enterprise's location.
As a practice, the following are definitions and allowable actions concerning the copy of the program used for backup purposes.
A copy of the program may reside, for backup purposes, on a machine as long as the program is not started. There is no additional charge for this copy.
A copy of the program may reside for backup purposes on a machine and is started, but is idling, and is not doing any work of any kind. There is no additional charge for this copy.
A copy of the program may reside for backup purposes on a machine, is started, and is doing work. The customer must acquire a license or entitlements for this copy and there will generally be an additional charge.
Doing work includes, for example, production, development, program maintenance, and testing. It also could include other activities such as mirroring of transactions, updating of files, synchronization of programs, data, or other resources (for example, active linking with another machine, program, database, or other resource, and so on), or any activity or configurations that would allow an active hot switch or other synchronized switch over between programs, databases, or other resources to occur.
In the case of a program or system configuration that is designed to support a high availability environment by using various techniques (for example, duplexing, mirroring of files or transactions, maintaining a heartbeat, active linking with another machine, program, database, or other resource), the program is considered to be doing work in the hot situation and a license or entitlement must be purchased.
Product Web sites
A complete list of IBM Tivoli products is available at Web site
Licensing Web site
IBM Tivoli product licensing documents are available at Web site
Passport Advantage: Through the Passport Advantage Agreement, you may receive discounted pricing based on the total volume of eligible products, across all IBM brands, acquired worldwide. The volume is measured by determining the total Passport Advantage points value of the applicable acquisitions. Passport Advantage points are only used for calculating the entitled Passport Advantage discount.
To determine the required Tivoli product configuration under Passport Advantage, the Tivoli Enhanced Value-Based Pricing Model applies. Your environment is evaluated on a per-product basis.
Use the following two-step process to determine the total Passport Advantage points value:
- Analyze your environment to determine the number of Tivoli Management Points or other charge unit for a product. The quantity of each product's part numbers to be ordered is determined by that analysis.
- Order the Passport Advantage part numbers. A Passport Advantage point value, which is the same worldwide for a specific part number regardless of where the order is placed, is assigned to each Tivoli product part number. The Passport Advantage point value for the applicable part number, multiplied by the quantity for that part number, will determine the Passport Advantage points for that Tivoli product part number. The sum of these Passport Advantage points determines the Passport Advantage point value of the applicable Tivoli product authorizations, which then may be aggregated with the point value of other applicable Passport Advantage product acquisitions to determine the total Passport Advantage points value.
The discounted pricing available through Passport Advantage is expressed in the form of Suggested Volume Prices (SVPs), which vary depending on the SVP level. Each SVP level is assigned a minimum total Passport Advantage point value, which must be achieved, in order to qualify for that SVP level.
Media packs and documentation packs do not carry Passport Advantage points and are not eligible for SVP discounting.
For additional information on Passport Advantage, refer to the following Web site
The following Passport Advantage part number categories may be orderable:
- License and Software Maintenance 12 Months this is the product authorization with maintenance to the first anniversary date.
- Annual Software Maintenance Renewal this is the maintenance renewal for one anniversary that applies when you renew the existing coverage period prior to the anniversary date at which it expires.
- Software Maintenance Reinstatement 12 Months this is when you have allowed the Software Maintenance to expire, and later wish to reinstate your Software Maintenance.
- Media packs these are the physical media, such as CD-ROMs, that deliver the product's code.
IBM Tivoli Federated Identity Manager Business Gateway V6.1
IBM Tivoli Federated Identity Manager Business Gateway is priced per server. In pricing the IBM Tivoli Federated Identity Manager Business Gateway V6.1 component with restricted terms and conditions (TFIM Business Gateway Single Business Partner license), the following examples are provided to show pricing per server. The definition of a server is provided in a previous section.
ABC Consumer Goods deploys TFIM Business Gateway V6.1 on one server in order to connect with one retail partner. ABC Consumer Goods must purchase one entitlement of the TFIM Business Gateway Single Business Partner license for use with one retail partner.
ABC Consumer Goods deploys TFIM Business Gateway V6.1 on three servers in order to connect with its three retail partners (who are competitors with each other). ABC Consumer Goods wants to keep their IT configurations separate for business and accounting reasons. ABC Consumer Goods must purchase three entitlements of TFIM Business Gateway Single Business Partner license, one for each of their three retail partners.
ABC Consumer Goods deploys TFIM Business Gateway V6.1 on one server in order to connect with three retail partners. ABC Consumer Goods must purchase three entitlements of TFIM Business Gateway Single Business Partner license, or must purchase one unrestricted entitlement of TFIM Business Gateway V6.1.
XYZ Chemicals deploys TFIM Business Gateway V6.1 management and runtime server on one server, and the administrative console on another server in order to connect with one pharmaceutical partner. XYZ Chemicals must purchase one entitlement of TFIM Business Gateway Single Business Partner license.
XYZ Chemicals deploys TFIM Business Gateway V6.1 management and runtime server on three servers and the administrative console on another server in order to connect with three pharmaceutical partners. XYZ Chemicals must purchase three entitlements for TFIM Business Gateway Single Business Partner license.
ABC Consumer Goods deploys TFIM Business Gateway V6.1 on one server in order to connect with one retail partner. Total users equals 100. ABC Consumer Goods must purchase one entitlement of TFIM Business Gateway Single Business Partner license.
ABC Consumer Goods deploys TFIM Business Gateway V6.1 on one server
in order to connect with one retail partner. Total users equals 10,000.
ABC Consumer Goods must purchase one entitlement of TFIM Business
Gateway Single Business Partner license.
Back to top
This product is only available via Passport Advantage. It is not available as shrinkwrap.
Product Licensed function title Product group category Tivoli Federated Identity Tivoli Tivoli Manager Business Gateway Security Federated Identity Manager Tivoli Federated Identity Tivoli Tivoli Manager Business Gateway Security Federated for Single Partner Identity Manager
PID Charge unit Program name number description Tivoli Federated Identity Manager 5724-Q82 Servers Business Gateway Tivoli Federated Identity Manager 5724-Q82 Servers Business Gateway for Single Partner
Charge metrics definitions
A server is a computer system that executes requested procedures, commands, or applications to one or more user and/or client devices. A PoE must be obtained for each server regardless of the number of processors and partitions in the server on which the program runs or for each server managed by the program. Where blade technology is employed, each blade is considered a separate server.
Passport Advantage customer: Media pack entitlement details
Customers with active maintenance or subscription for the products listed are entitled to receive the corresponding media pack.
TFIM Business Gateway V6.1.0
Entitled maintenance Part offerings description Media packs description number IBM Tivoli Federated TFIM Business Gateway BJ0JNML Id Mgr Business V6.1 Media Pack CD-ROM Gateway Srv Multilingual Tivoli Federated TFIM Business Gateway BJ0JNML Identity Mgr Bus V6.1 Media Pack CD-ROM Gway for Sgl Partner Multilingual Srv
New licensees: Orders for new licenses will be accepted now.
Shipment will begin on the planned availability date.
Ordering information for Passport Advantage: Passport Advantage allows you to have a common anniversary date for Software Maintenance renewals, which can simplify management and budgeting for eligible new versions and releases (and related technical support) for your covered products. The anniversary date, established at the start of your Passport Advantage Agreement, will remain unchanged while your Passport Advantage Agreement remains in effect. New software purchases will initially include twelve full months of maintenance coverage. Maintenance in the second year (the first year of renewal) can be prorated to be coterminous with your common anniversary date. Thereafter, all software maintenance will renew at the common anniversary date and include twelve full months of maintenance.
Refer to the IBM International Passport Advantage Agreement and to the IBM Software Maintenance Handbook for specific terms relating to, and a more complete description of, technical support provided through Software Maintenance.
The quantity to be specified for the Passport Advantage part numbers in the following table is servers. To order for Passport Advantage, specify the desired part number and quantity.
Passport Advantage program licenses
Tivoli Federated Identity Manager Business Gateway
Part Part description number Tivoli Federated Identity Manager Business Gateway TFIM Business Gateway Servers D59UYLL License and SW Maintenance 12 Mo TFIM Business Gateway Servers SW E035CLL Maintenance Annual Renewal TFIM Business Gateway Servers SW D59UZLL Maintenance Reinstatement 12 Mo Tivoli Federated Identity Manager Business Gateway for Single Partner TFIM Business Gateway Single Partner D6123LL Servers Lic and SW Maintenance 12 Mos TFIM Business Gateway Single Partner E03TNLL Servers SW Maint Annual Renewal TFIM Business Gateway Single Partner D6124LL Servers SW Maint Reinstatement 12 Mo TFIM Business Gateway Srv from TFIM BGway D612PLL SP Srv License and SW Maint 12 Mo
To order a media pack for Passport Advantage, specify the part number in the desired quantity from the following table:
Part Description number TFIM Business Gateway V6.1 Media BJ0JNML Pack CD-ROM Multilingual
Tivoli Federated Identity Mgr Business Gateway is also available via Web download from Passport
Back to top
|Terms and conditions|
The terms and conditions for IBM Tivoli Federated Identity Manager Business Gateway V6.1, as previously announced in Software Announcement 206-292 , dated November 14, 2006, listed below:
The License for IBM Tivoli Federated Identity Manager Business Gateway for Single Business Partner
is restricted to a single connection with another Business Partner's environment. To have multiple
connections with another Business Partner's environment or to connect to multiple Business Partners,
a full IBM Tivoli Federated Identity Manager Business Gateway product license must be purchased.
Back to top
Information on charges is available at Web site
In the Electronic tools category, select the option for "Purchase/upgrade tools".
For Passport Advantage information and charges, contact your IBM representative or authorized IBM Business Partner. Additional information is also available at
Business Partner information
If you are an IBM Business Partner Distributor for Workstation Software acquiring products from IBM, you may link to Passport Advantage Online for resellers where you can obtain Business Partner pricing information. An IBM ID and password are required.
Back to top
To order, contact the Americas Call Centers, your local IBM representative, or your IBM Business Partner.
To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968).
Phone: 800-IBM-CALL (426-2255) Fax: 800-2IBM-FAX (242-6329) Internet: email@example.com Mail: IBM Americas Call Centers Dept. Teleweb Customer Support, 9th floor 105 Moatfield Drive North York, Ontario Canada M3B 3R1 Reference: YE001
The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.
Note: Shipments will begin after the planned availability date.
Back to top