User guide

Developing Java Applications
7-19
Obtaining Service ID File
If an authentication server of the authentication destination is specified with a Java application that
receives a user ID/password from a client for authentication (without using a business server
configuration), the application operation administrator requests the SSO administrator to obtain the
service ID file. Store the obtained service ID file in the server where the Java application is to be
executed using a secure method.
A service ID file can be created by executing an ssomksid command in a repository server in which the
authentication infrastructure is set up.
For information on obtaining a service ID file, refer to “ssomksid” in “Single Sign-on Operation
Commands” in the Reference Manual (Command Edition).
Use the serviceidpath option for the login configuration file to specify a service ID file. For details of the
login configuration and login configuration file, refer to Creating Login Configuration File.
Creating Login Configuration File
The application operation administrator creates a login configuration file required for application
execution. Any file name can be specified for system property java.security.auth.login.config at
application execution time. In the login configuration file, write the login configuration in which a
LoginModule provided by single sign-on JavaAPI is set. For login configuration file details, refer to the
J2SDK and JAAS documents provided by Sun Microsystems, Inc.
Write the login configuration in the following format:
<entry-name> {
<loginmodule-class-name> <flag> <module-option>;
};
Write the name specified when LoginContext is converted to an instance in entry-name. All symbols can
be used if the entry name is enclosed with double or single quotation marks. Guidelines on the symbols
that can be used if the entry name is not enclosed with double or single quotation marks are as follows.
Symbols that can be used without enclosing the entry name with double or single quotation marks:
• JDK1.3
− Hyphen (-)
− Period (.)
• JDK1.4
− Dollar sign ($)
− Hyphen (-)
− Period (.)
− Underscore (_)
Set either of two LoginModules provided by the single sign-on JavaAPI in loginmodule-class-name.
• Servlet application that receives authentication information from a client
com.fujitsu.interstage.sso.auth.module.ISCredentialLoginModule