IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Cross-domain
single
sign-on
v
[cdsso]
v
[cdsso-peers]
[cdsso]
stanza
cdsso-auth
=
{none|http|https|both}
Enables
WebSEAL
to
accept
tokens.
Requires
that
an
authentication
mechanism
is
specified
for
the
token
consume
(sso-consume)
library
in
the
[authentication-mechanisms]
stanza.
Specifies
which
protocols
are
supported.
The
value
both
means
both
HTTP
and
HTTPS.
This
stanza
entry
is
required.
Default
value:
none
Example:
cdsso-auth
=
none
cdsso-create
=
{none|http|https|both}
Enables
WebSEAL
to
accept
tokens.
Requires
that
an
authentication
mechanism
is
specified
for
the
token
create
(sso-create)
library
in
the
[authentication-mechanisms]
stanza.
Specifies
which
protocols
are
supported.
The
value
both
means
both
HTTP
and
HTTPS.
This
stanza
entry
is
required.
Default
value:
none
Example:
cdsso-create
=
none
authtoken-lifetime
=
number_of_seconds
Positive
integer
that
expresses
the
number
of
seconds
for
which
the
single
sign-on
authentication
token
is
valid.
Minimum
value:
1.
There
is
no
maximum
value.
See
the
discussion
of
integer
maximum
values
in
“Guidelines
for
configuring
stanzas”
on
page
378.
This
stanza
entry
is
required.
Default
value:
180
Example:
authtoken-lifetime
=
180
cdsso-argument
=
argument_name
Name
of
the
argument
containing
the
cross-domain
single
sign-on
token
in
a
query
string
in
a
request.
This
is
used
to
identify
incoming
requests
that
contain
CDSSO
authentication
information.
Valid
characters
are
any
ASCII
characters,
except
for
question
mark
(
?
),
ampersand
(
&
),
and
equals
sign
(
=
).
This
stanza
entry
is
required.
Default
value:
PD-ID
Example:
cdsso-argument
=
PD-ID
use-utf8
=
{true|false}
428
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide