MQSeries.net :: View topic

duffMan · Posted: Fri Nov 07, 2008 12:56 pm Post subject: CDSSO, TAM, and WMB

Has anyone out there succesfully called TAM (tivoli access manager) to get a security token that can be used in a CDSSO scenario?

Essentially, what we are doing is ...

An https web service request will be coming from the internet into our secured environment. This request will have basic authorization in the http header which will be authenticated by TAM and forwarded to Message Broker to process.... this part works.

On of the jobs of the WMB web service is to provide a URL back to the client. This URL is to be used by the client to launch a J2EE application in a browser. The caveat is that the client does not want to sign in...again, since they already provided creds for the initial web service call. So.. the design solution is to have WMB to include a security token in the URL.

TAM has been set up to evaluate the security token and let them pass into the J2EE application. This works in a simulated test. (using browsers)

What I can't seem to acheive is getting WMB to succesfully call TAM to get the security token.

I can do it in a browser, which does an HTTP GET method with Authorization credentials, but when I do the HTTP GET method in WMB I keep getting a response..'400 bad request'.

apparently this can be done in Data Power, but we're not there...yet.

anyway..just curious if anyone out there has had any success with this.

Thanks,
Jason.