IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

ISAM - Sharing sharing among replicated back-end applications via WebSeal working as load balancer

  • 1.  ISAM - Sharing sharing among replicated back-end applications via WebSeal working as load balancer

    Posted Tue March 31, 2020 03:04 AM
    Hi All,

    I am trying the use case where the replicated back-end application needs to be protected via ISAM.  
    In order to try this use case, I created two Websphere profiles and deployed the application on both the profiles. Also, I created a junction pointing to both the servers. 

    WebSEAL sends the user request to any back-end application and works as a load balancer. To stick to one of the replicated back-end applications, through-out the user session, I modified the junction to stateful.

    Now the use cases I wanted to try is:
    If any of the back-end servers go down then
    1. The user connected to it via session must be redirected to other replicated servers and users need not login again.
    2. User current state must be maintained even though user requests are redirected to the replicated back-end applications.

    I went through the documentation and the configuration steps that I observed are related to replicated WebSEAL instance and not the back-end applications.

    The confusion I have is whether there is a need for additional configuration on Websphere Application Server or I just need to play with WebSEAL instance configurations? and How?
    Do I need to implement the SSO first? 

    Regards,
    Prashant Narkhede

    ------------------------------
    Prashant Narkhede
    ------------------------------


  • 2.  RE: ISAM - Sharing sharing among replicated back-end applications via WebSeal working as load balancer

    Posted Mon April 06, 2020 02:13 AM
    Hi

    Seems,webseal level configurations are okay from your step. (good to have sso implemented as well)

    On websphere you need to make sure, user's websphere related session State is honored by Websphere when requests goes from one Websphere node to the other Websphere node.

    ------------------------------
    Tushar
    Tushar
    ------------------------------

    Original Message


  • 3.  RE: ISAM - Sharing sharing among replicated back-end applications via WebSeal working as load balancer

    Posted Fri April 24, 2020 02:09 PM
    Hi,

    I have seen this to work when LTPA SSO is configured between WebSEAL and WAS. So implementing SSO first would be a good option and will probably make it work.

    Regards,

    ------------------------------
    Jahanzaib Sarwar
    ------------------------------

    Original Message


Related Content