Configuration Guides › SOA Agent for IBM WebSphere Guide › SOA Agent for IBM WebSphere Introduction › SOA Agent for IBM WebSphere Components › SOA Agent Login Module

SOA Agent Login Module

The SOA Agent Login Module is a JAAS Login Module that performs authentication and authorization for JAX-RPC web services protected by the SOA Agent for IBM WebSphere.

The SOA Agent Login Module authenticates credentials obtained from the following request types against associated user directories configured in SOA Security Manager:

• SOAP requests intercepted by the SOA Agent JAX-RPC Handler .
• Requests for web service resources from users with pre-established SOA Security Manager and SiteMinder sessions (validating the session and obtaining user names from associated SiteMinder session ticket cookies)
• System login (such as J2EE RunAs identity) requests.

If SOA Security Manager authentication is successful, the SOA Agent Login Module populates a JAAS Subject with a SOA Security Manager Principal that contains the username and associated SOA Security Manager session data.

The SOA Agent Login Module then determines whether an authenticated user is allowed to access a protected WebSphere resource, based on associated SOA Security Manager authorization policies.