Configuring Tivoli Access Manager

IBM® WebSphere® Portal supports the use of IBM Tivoli® Access Manager. Existing Tivoli Access Manager users can use the Tivoli Access Manager services to assist them in their deployment.

About this task

You can use the following services:
  • WebSEAL Single Signon (SSO) for authentication
  • Protected Object Space and Access Control List Management for authorization
  • Global Sign-on (GSO) lockbox credential vault integration
  • Automatic user provisioning from WebSphere Portal self-registration to Tivoli Access Manager

Perform the following tasks to configure Tivoli Access Manager:

  • Configuring Tivoli Access Manager for non-z/OS operating systems
    You can configure Tivoli Access Manager for authentication, authorization, and with a credential vault with one task or you can configure them individually.
  • Configuring Tivoli Access Manager on z/OS
    You can configure Tivoli Access Manager for authentication, authorization, and with a credential vault with one task or you can configure them individually.
  • Enabling user provisioning
    When users are created in WebSphere Portal, they are not automatically imported into Tivoli Access Manager. Enabling automatic user provisioning to Tivoli Access Manager changes this behavior. Once this feature is enabled, users are automatically imported into Tivoli Access Manager whenever they are created in WebSphere Portal. When user provisioning to Tivoli Access Manager, anyone with access to the public URL can become an active user in Tivoli Access Manager as long as the self-registration feature remains enabled.
  • Verifying external authorization to Tivoli Access Manager
    After configuring IBM WebSphere Portal to use Tivoli Access Manager for externalized authorization, you should verify that it works properly before continuing with any additional configuration tasks.
  • Removing the Credential Vault adapter
    If you no longer require the use of the credential vault adapter that you created, you can remove it from your configuration.
  • Disabling user provisioning
    After enabling and using the user provisioning feature within IBM Tivoli Access Manager, you can disable the feature.
  • Parent topic: External security managers