Agent Guide › Configuring Policies for the SiteMinder Agent › Configure SiteMinder Policies to Support J2EE Roles

Configure SiteMinder Policies to Support J2EE Roles

You can configure the SiteMinder JACC Provider to support WebSphere J2EE roles by mapping those roles to users and groups defined in a SiteMinder user directory.

Note: The SiteMinder Agent only supports roles that have global scope across all applications. Application-scoped roles (that is, where the same role name is bound to two different sets of users or groups for two different applications for use by programmatic calls) are not supported. Note also that roles defined in web.xml are also not supported.

To configure the SiteMinder JACC Provider to handle J2EE authorization roles, configure

• A realm, named SmJaccRoles, that holds rules that map to roles
• Within the SmJaccRoles realm, a role-mapping rule that corresponds to each role you want to support
• For each configured role-mapping rule, a policy that binds users to the mapped role