IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

e-community
single
sign-on
E-community
single
sign-on
is
another
implementation
of
cross-domain
authentication
in
an
Tivoli
Access
Manager
environment.
The
goal
of
cross-domain
authentication
is
to
allow
users
to
access
resources
across
multiple
servers
in
multiple
domains
without
re-authentication.
An
″e-community″
is
a
group
of
distinct
domains
(Tivoli
Access
Manager
or
DNS)
that
participate
in
a
business
relationship.
These
participating
domains
can
be
configured
as
part
of
one
business
(and
perhaps
using
different
DNS
names
for
geographic
reasons)
or
as
disparate
businesses
with
a
shared
relationship
(for
example,
company
headquarters,
a
life
insurance
company,
and
a
financial
management
company).
In
either
scenario,
there
is
always
one
domain
that
is
designated
the
″home″
or
″owner″
domain.
In
the
case
of
participating
businesses,
the
home
domain
owns
the
business
agreements
that
govern
the
e-community.
In
both
scenarios,
authentication
information
about
the
users
who
participate
in
the
e-community
(including
the
user
names
and
passwords
used
for
authentication)
is
maintained
in
the
home
domain.
This
arrangement
allows
a
single
point
of
reference
for
administration
issues,
such
as
help
desk
calls
within
the
e-community
that
all
refer
to
the
home
domain.
Alternatively,
you
can
use
the
Tivoli
Access
Manager
Web
Portal
Manager
to
delegate
the
management
of
this
information
such
that
participating
domains
have
responsibility
for
the
administration
of
their
own
users.
The
diagram
below
illustrates
a
sample
e-community
with
two
participating
domains:
domain
A
(dA.com)
and
domain
B
(dB.com).
In
this
example,
domain
A
represents
the
home
or
owner
domain.
Domain
B
is
a
participating,
or
″remote″,
domain.
256
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide