IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to Library

Access Manager Federation Cookbook 

Thu July 18, 2019 05:47 AM

This cookbook provides a step-by-step guide to installing a pair of IBM Security Access Manager 9.0.6.0 Virtual Appliances and then configuring them to demonstrate:

  • Single Sign-On with SAML 2.0

    • Browser POST profile

  • Single Sign-On with OpenID Connect
    • Using Federation add-on as OIDC Provider and Relying Party
    • Using Reverse Proxy as Relying Party

    • Dynamic Client Registration

  • Sending a token to a back-end server in an HTTP Header
    • SAML 2.0
    • LTPA
    • JSON Web Token (JWT)

    • RACF Passticket

  • Use of advanced Federation Mapping Rules for LDAP attribute lookup

  • Use of different "Point-of-Contact" Profiles


A set of Python scripts are provided which can be used to automate the configuration.  These scripts have been validated against the Access Manager Virtual Appliance running 9.0.6.0 and 9.0.7.0.

An older version of this cookbook and scripts (for Access Manager 9.0.0.0-9.0.3.0) is available here.

#ISAM

Statistics
1 Favorited
324 Views
2 Files
0 Shares
208 Downloads
​
Attachment(s)
Download All
pdf file
SAM906-FederationCookbook 20190718.pdf   8.09 MB   1 version
Uploaded - Thu July 18, 2019
 
Download
zip file
SAM906-fed-providedfiles-20190718.zip   341 KB   1 version
Uploaded - Thu July 18, 2019
 
Download

Comments

mohamed ghoniem
Tue May 31, 2022 08:16 AM

I didn't found the folder  pages in the attached  files 

I got it thanks.

Jon Harry
Mon June 15, 2020 07:31 AM

Eswari,  I'm glad you like the cookbook.  The scripts provided with this cookbook are not generic.  If you are looking to develop devOps with automated configuration I would definitely recommend using the Ansible scripts.  For ISIM I don't know what is available - I suggest you ask in the forum.

Eswari Gupta
Fri June 12, 2020 01:29 PM

This is very useful , thanks for this cookbook . I also see Ansible playbooks , are they both achieving the same tasks , would you recommend one over the other . Also we are looking to automate ISIM user and groups as well , could you please point to any resources.

Jon Harry
Wed January 08, 2020 05:21 AM

Damar.  I'm sorry you're having issues.  I suggest you ask your question on the discussion forum.  Can you provide a reference to where in the cookbook you have the issue.  It's hard to know what is failing from your brief description.