users@glassfish.java.net

Re: Sun App Server and Access Manager on same server

From: <glassfish_at_javadesktop.org>
Date: Sun, 22 Jun 2008 01:33:04 PDT

Hi Vineet

Sun Access Manager is a Web Application itself, so it runs inside an App Server, such as SAS 8.1 This is how it is deployed in the Sun Java Enterprise System for example.

Where the options for deployment become confusing is when the Policy Agent modue for Access Manager comes along. This is used to enforce policies defined in Access Manager on Web Applications running in the Application Server. This Policy Agent should not be installed on the same (Application Server) domain as the domain that Access Manager is running on. Some Sun documentation state this, while other Sun Docs contradict this. See the end of the page at http://docs.sun.com/app/docs/doc/820-2539/galtt?a=view, and have a look at the corresponding page for the SAS 8.1 Policy Agent.

The best idea is to keep Access Manager running on at least a separate instance of Application Server, or at least a separate domain inside your App Server.

BTW, Access Manager is know as OpenSSO in the open source world.

Regards, Sean
[Message sent by forum member 'scondo01' (scondo01)]

http://forums.java.net/jive/thread.jspa?messageID=281835