User guide

Chapter 7: Developing Applications
7-20
• Java application that receives a user ID/password from a client for authentication
com.fujitsu.interstage.sso.auth.module.ISLoginModule
Generally, "required" should be set in the flag. “requisite”, “sufficient”, and “optional” can also be set.
For details, refer to the J2SDK and JAAS documents provided by Sun Microsystems, Inc.
In module-option, write the information used by LoginModule such as authentication infrastructure
information of the authentication destination and the service ID file path name in list format where a
blank character is used as a delimiter. Insert an equals sign between an option name and a value and
enclose the value with double quotation marks. Use only lowercase letters to specify an option name to
be used by LoginModule provided by the single sign-on JavaAPI. If an uppercase letter is used in an
option name (or if an option name is specified incorrectly), it is assumed that the option name is omitted.
Insert a semicolon at the end of LoginModule specification items.
Table 7-12 lists the option that can be used with the
com.fujitsu.interstage.sso.auth.module.ISCredentialLoginModule.
Table 7-12 Option for module ISCredentialLoginModule
Option Explanation
serverport Specify the port number of the business server.
Use the Interstage Management Console to select [System] > [Security] >
[Single Sign-on] > [Business system] > [Business system Name]. Select the
[Settings] tab and click [Detailed Settings [Show]] then specify the value
specified for [Port number] in [Network Settings]. For details on Interstage
Management Console definition, refer to the Operator’s Guide.
Table 7-13 lists the options that can be used with the
com.fujitsu.interstage.sso.auth.module.ISLoginModule.
Table 7-13 Option for module ISLoginModule
Option Explanation
serviceidpath When specifying an authentication server of the authentication destination
without using a business server configuration, specify a service ID file by
using the absolute path name. If this option is specified, the authserver
option must also be specified.
When writing the path name of the specified service ID file, use \\ as a file
separator because \ is an escape character.
authserver Specify this option when specifying an authentication server of the
authentication destination without using a business server configuration in
authentication infrastructure-URL+"/ ssoatcag” format
Example: https://www.fujitsu.com:443/ssoatcag
If this option is specified, the serviceidpath option must also be specified.
timeout Specify a read timeout time from 0 to 300 (seconds), which is used for
communication with an authentication server.
When 0 is specified, timeout is not monitored.
When omitted, 60 is assumed.