Home Contact Pirean Press Resources Site Map  

IBM Tivoli

Access Manager 6.0 Deployment and Admin

Course reference: TW100

Course Summary:

Format:Classroom
Duration:4.0 Day(s)
Price:TBC

Through lecture and hands-on labs, learn about IBM Tivoli Access Manager for e-business 6.0. IBM Tivoli Access Manager is an authentication and authorization solution for corporate Web, client/server, and existing applications. Learn to control user access to protected information and resources by providing a centralized, flexible, and scalable access control solution.

Audience

This is an advanced course for system administrators, security architects, application programmers, and identity developers who maintain large numbers of users, groups, and access to specific information resources.

Skills Taught


Contents:

  • IBM Tivoli Access Manager for e-business 6.0 introduction and overview
    • Introduction to IBM Tivoli Access Manager for e-business
    • IBM Tivoli Access Manager for e-business architecture
    • IBM Tivoli Access Manager for e-business integration
  • IBM Tivoli Access Manger for e-business installation and configuration
    • IBM Tivoli Access Manager for e-business prerequisites
    • IBM Tivoli Access Manager for e-business installation
  • IBM Tivoli Access Manager and the Lightweight Directory Access Protocol (LDAP) user registry
    • What is LDAP?
    • IBM Tivoli Access Manager and the user registry
    • Installing and configuring the IBM Tivoli Directory Server Web Application Tool
  • Managing users and groups
    • using the IBM Tivoli Access Manager Command Line and Graphical User Interface
    • installing and configuring the Web Portal Manager
    • using pdadmin commands and Web Portal Manager to manage users, groups, and access control
  • Managing access control
    • Controlling access with IBM Tivoli Access Manager
    • Access Control Lists (ACL)
    • Projected Object Policy (POP)
    • Internet Protocol (IP) authentication
  • Introduction to WebSEAL
    • What is WebSEAL?
    • WebSEAL authentication
    • WebSEAL junctions
    • Web space protection
    • Web space scalability
    • Single sign-on
  • WebSEAL installation and configuration
    • Installation prerequisites
    • Installation methods
    • WebSEAL configuration
    • WebSEAL instance management
    • WebSEAL configuration files
  • WebSEAL authentication mechanisms
    • Authentication overview
    • Authentication methods
    • Basic authentication
    • Forms authentication
    • Client certificate authentication
    • Hypertext Transfer Protocol (HTTP) header authentication
    • IP address authentication
    • Token authentication
  • Advanced authentication methods
    • Multiplexing proxy agents
    • Switch user authentication
    • Re-authentication
    • External authentication interface
    • Logout and password change operations
    • Login failure policy
  • WebSEAL junctions
    • WebSEAL junctions overview
    • Managing junctions with Web Portal Manager
    • Managing junctions with pdadmin utility
    • Standard WebSEAL junctions
    • Transparent path junctions
    • Stateful junctions
    • Junction cookie
    • Junction mapping table
    • Generating a third party Web space (query-contents)
    • Junction throttling
  • Virtual host junctions
    • Virtual host junction concepts
    • Configuring a virtual host junction
    • Virtual host junctions in object space
    • Commands for virtual host junctions
  • Single sign-on
    • Single sign-on concepts
    • Single sign-on using HTTP Basic Authentication (BA) headers
    • Supplying client identity and generic password
    • Forwarding original client BA header information
    • Removing client BA header information
    • Supplying user name and password from Global Sign-On (GSO)
    • GSO
    • Configuring a GSO enabled WebSEAL junction
    • Forms single sign-on authentication
    • Single sign-on to IBM WebSphere Lightweight Third Party
    • Authentication (LTPA)
  • Windows desktop single sign-on
    • Windows single sign-on overview
    • SPNEGO
    • Active Directory with Windows single sign-on
    • Configuration of Windows single sign-on
  • CDSSO
    • CDSSO overview
    • Configuration of CDSSO
    • Extended attributes for CDSSO
  • SMS
    • Overview of SMS
    • Administration
    • Installation
    • Configuration
    • SMS and WebSEAL
  • Domain and policy proxy server
    • IBM Tivoli Access Manager secure domains
    • Managing secure domains
    • Using policy proxy servers
  • Authorization rules
    • Authorization rules
    • Creating custom authorization Rules
  • Delegated administration
    • Domain management responsibilities
    • Delegated administration
    • Delegated user and group administration
    • Delegated object space management
  • Logging and auditing
    • Policy server auditing
    • Policy server logging
    • WebSEAL auditing
    • WebSEAL logging
  • CARS
    • CARS overview
    • CARS installation and configuration
    • CARS configuration for IBM Tivoli Access Manager policy server
    • CARS WebSEAL configuration
    • IBM Tivoli Access Manager reporting with CARS