Date: 27-Nov-2009 URL: global/training/catalog/courses/AM-3800.xml

Sun OpenSSO Enterprise 8.0: Deployment Essentials (AM-3800)

The Sun OpenSSO Enterprise 8.0: Deployment Essentials course provides students with a description of the role of Sun OpenSSO Enterprise (OpenSSO) in an identity management solution. Students learn to deploy, configure, manage, and administer OpenSSO.

Sun OpenSSO Enterprise 8.0 integrates all of the capabilities required to handle SSO, authorization, and personalization into a single, comprehensive solution. This is a major new release of the Sun software products, Sun Java System Access Manager (Access Manager) and Sun Java System Federation Manager (Federation Manager). OpenSSO Enterprise 8.0 unites and enhances the functionality of Sun's former Java System Access Manager and Sun Java System Federation Manager products.

This course does not present Lightweight Directory Access Protocol (LDAP) and Sun Directory Server Enterprise Edition (Directory Server EE) concepts. These topics are presented in other Sun courses within the identity management learning path.

»	Details below

Languages

English

Who Can Benefit

Students who can benefit from this course are system integrators, professional services consultants, enterprise application developers, and other technical personnel. The course is designed for those who must deploy OpenSSO Enterprise in an existing infrastructure and adapt the product's appearance and functionality to suit the specific enterprise requirements.

Prerequisites

To succeed fully in this course, students should be able to:

Execute commands, navigate and manage files and directories, and edit files using the Solaris Operating System command line

Skills Gained

Upon completion of this course, students should be able to:

Define the role of OpenSSO in the enterprise computing environment, and list the features and functions of OpenSSO that address key business challenges
Download the OpenSSO source code and track OpenSSO issues
Deploy a multi-instance configuration with session failover
Install and configure Policy Agent 3.0 software
Configure OpenSSO using the console and the command line
Activate and configure audit logging and debugging features in OpenSSO
Configure OpenSSO realms and data stores
Configure and customize authentication and single sign-on
Configure authorization
Customize an OpenSSO instance
Remove OpenSSO components from a system
Deploy a federated identity configuration, including a fedlet

Course Content

Module 1 - Introducing OpenSSO Enterprise

Describe OpenSSO features at a high level

Module 2 - Working With the OpenSSO Project

Log in to, start zones on, and navigate around the Solaris Sandbox
Deploy OpenSSO in a simple environment
Browse the OpenSSO source tree (optional)
Download the OpenSSO source code (optional)
Generate reports using the OpenSSO issue tracker (optional)
Configure NetBeans IDE and GlassFish for debugging the OpenSSO source code (optional)
Run a NetBeans IDE debugging session on the OpenSSO web application (optional)

Module 3 - Preparing an Environment for a Complex OpenSSO Deployment

Install and configure two GlassFish instances for use as OpenSSO web containers
Secure the GlassFish instances
Install, secure, and configure a software-based load balancer
Install a user directory

Module 4 - Deploying a Multi-Instance OpenSSO Site With Session Failover

Deploy a multi-instance OpenSSO site
Set up the OpenSSO command-line tools
Configure session failover for an OpenSSO site
Verify that OpenSSO sessions fail over

Module 5 - Protecting Sites With Policy Agent 3.0

Deploy a Web Server instance that hosts a web site
Prepare the environment for the Web Policy Agent installation
Install and test the Web Policy Agent
Deploy a GlassFish application server instance
Prepare the environment for the Java 2 Platform, Enterprise Edition (J2EE) Policy Agent installation
Install and test the J2EE Policy Agent

Module 6 - Configuring OpenSSO

Back up the configuration data store using the CLI
Modify an agent profile using the console and the CLI

Module 7 - Enabling and Configuring Logging and Debugging

Review OpenSSO log files
Log to a relational database
Modify the debugging level using the console and the CLI

Module 8 - Configuring OpenSSO Realms

Create the company-wide realm
Create realms for national offices and departments

Module 9 - Configuring Authentication

Configure data store authentication
Configure an authentication chain with multiple authentication module instances
Configure account lockout for a realm
Use the OpenSSO sample login program to programmatically authenticate to OpenSSO
Repair console authentication using the CLI

Module 10 - Configuring Policy

Configure a different default login URL in the Policy Agent
Create policies for the Example Chocolates web site
Create a policy that uses realm authentication
Delegate administration to users

Module 11 - Customizing an OpenSSO Instance

Customize an OpenSSO instance
Customize the authentication interface for a realm (optional)
Localize the authentication interface for a realm (optional)

Module 12 - Removing OpenSSO Components From a System

Uninstall an OpenSSO instance

Module 13 - Analyzing Federated Identity Scenarios

Analyze business problems addressed by federated identity and describe technologies that provide solutions

Module 14 - Configuring SAML 2 Circles of Trust

Prepare to federate two OpenSSO instances
Configure identity providers, service providers, and circles of trust
Verify that federation works

Module 15 - Deploying Fedlets

Configure and deploy the fedlet
Register the fedlet in an OpenSSO circle of trust
Import the identity provider's definition into the fedlet's configuration
Verify that the fedlet works