Access Manager Base

Access Manager Base Courses:

Configuring basic users using Active Directory as a federated directory

In this lab, you set up an Active Directory as a Federated directory. Then, you configure the Active Directory users as Basic users in Access Manager.

Configuring HTTP transformation feature
NEW

In this lab, you configure HTTP transformation rules in IBM Security Access Manager (ISAM) to modify HTTP requests and responses passing through the Reverse Proxy junctions.

Configuring External Authentication Interface (EAI)
NEW

The External Authentication Interface (EAI) extends the Reverse Proxy also known as WebSEAL, so that a remote application or service can authenticate Access Manager users.

This lab demonstrates steps to configure IBM Access Access Manager (ISAM) Reverse Proxy to redirect the authentication process to an EAI application. The EAI used in this lab is a simple Perl program test_sso.pl which performs a form-based login using user name and password. Then, the EAI posts the user identity using HTTP headers to the check_user.pl program which is configured as a trigger URL. The Reverse Proxy uses the HTTP headers posted in the trigger URL to build user credential internally and grant access to a protected resource.

Configuring client certificate and step-up authentication

This lab covers how to configure IBM Security Access Manager (ISAM) to use the user certificates issued by a trusted Certificate Authority (CA) for the client certificate-based authentication. The lab also demonstrates the step-up authentication using the client certificate-based authentication.

Configuring different types of junctions and passing identity attributes to backend resources

In this lab, you will build the reverse proxy junctions and use various options to pass identity information through headers.

Securing web resources using ACL, POP and Authorization rule policies

IBM Access Manager Platform protects web resources using security policies. Each security policy can be defined with a combination of the following controls: Access Control List (ACL) policies, Protected Object Policies (POPs) and Authorization rules.

In this lab, you use ACLs, POPs, and authorization rules to control access to the web content. You first create a junction for IBM HTTP Server (IHS) resources. Then, you apply various security policies to the web resources protected by that junction.

Configuring HTTP transformation feature

In this lab, you configure HTTP transformation rules to modify HTTP requests and responses passing through the reverse proxy junctions.

Configuring client certificate and step-up authentication

THIS COURSE IS RETIRED. 

Visit the following course for the updated version: Configuring client certificate and step-up authentication


This lab covers how to use the user certificates issued by a trusted authority for the client certificate authentication. It also demonstrates step-up authentication using client certificate as a second level of authentication.

Configuring SSO to WebSphere Liberty using LTPA token

This lab provides a sample configuration that enables Liberty application to authenticate and authorize against the Access Manager LDAP user registry using an LTPA cookie.

Configuring and using Access Manager V9 Platform

This lab provides a brief introduction to IBM Security Access Manager (ISAM) V9 Platform administration. You learn how to configure and use the IBM Security Access Manager V9.0.3 Platform module for web access management.