User guide

Basic System Configuration
1-7
If the user accesses the business system without being authenticated, the Web browser is
automatically directed to the Authentication infrastructure URL and requested to perform user
authentication. When authentication is successful, the Web browser is automatically directed back
to the URL specified first.
Note
• The authentication and business servers cannot be constructed on the same machine.
Authentication Infrastructure
The authentication infrastructure retains the user information required for authentication, and requests
each user to present a pair of user ID and password to certificate and authenticate.
The authentication infrastructure consists of an authentication server, repository server, and SSO
repository.
Note
All access to the Authentication infrastructure uses SSL communication. For details, refer to
“Authentication infrastructure URL”.
Authentication Server
The authentication server requests each user to present a pair of user ID and password or a certificate,
and authenticate the user.
The authentication server compares the user ID and Password (or certificate presented by the user)
with the user information previously set in the repository server to determine whether the user can use
the Single Sign-on system.
Note
The authentication server is provided by the following products:
• Interstage Application Server Enterprise Edition
• Interstage Application Server Standard Edition
• Interstage Application Server Plus
Repository Server
The repository server manages the information necessary for user authentication, such as user IDs and
passwords, and the information to authorize users to access the public URL path to the business system.
According to the request from the authentication server, the repository server fetches the user
information necessary for authentication from the SSO repository. The fetched information is then
transferred to the authentication server.
Two types of repository server are available: Repository server (update system) and repository server
(reference system).
The repository server (reference system) is installed when system availability needs to be increased. If
the repository server (reference system) to which the authentication server requests authentication has
failed, repository server (reference system) to the authentication request destination is switched
automatically to respond to the authentication request from the relevant client.