Configure the Portal for Customized Authentication 

When the JAR file with the classes of the customized authentication implementation (demolm.jar in this example) has been copied to the folder <j2ee home>/cluster/server/additional-lib the JAR file has to be added to the following configuration files.

Changes in file library.txt

The classes in the demolm.jar file have to be visible to the UME classes and vice versa. This is done by adding the JAR file to the definition of the UME libraries in the file <j2ee home>/cluster/server/managers/library.txt.

Append the name of the JAR file as follows (the added characters are written in bold):

library com.sap.security.ume com/sap/security/api/com.sap.security.api.jar; com/sap/security/api/com.sap.security.api.perm.jar; com/sap/ip/basecomps/BaseComps.jar; com/sap/security/api/com.sap.security.core.jar; com/sap/security/api/com.sap.security.core.tpd.jar; com/sap/security/demolm.jar

 

Changes in file authschemes.xml

The customized authentication implementation has to be added as new authscheme section to the authscheme structure defined in the file authschemes.xml.

New authscheme section:

<authscheme name="myNewLogon">   <loginmodule>     <loginModuleName>       com.sap.security.demo.DemoLoginModule     </loginModuleName>     <controlFlag>REQUISITE</controlflag>     <options></options>   </loginmodule>   <priority>20</priority>   <frontendtype>2</frontendtype>   <frontendtarget>com.sap.portal.runtime.logon.certlogon</frontendtarget> </authscheme>

The standard authscheme entry of the portal is called uidpwlogon. The new authscheme entry is identical to uidpwlogon, except for the authscheme name and loginModulename.

 

Using the Customized Authentication as Default Authentication

To use a customized authscheme as standard portal authentication, the authscheme parameter in the authscheme-refs section has to be changed to the name of the customized authscheme.

To use the myNewLogon authschemethe authscheme-refs entry has to be changes as follows:

<authscheme-refs>   <authscheme-ref name="default">     <authscheme>myNewLogon</authscheme>   </authscheme-ref> </authscheme-refs>

Refer to SAP Note 686538 for details about saving the settings in the authschemes.xml file before applying a Support Package to the SAP Enterprise Portal.

 

Using the Customized Authentication for Specific iViews

With the portal user interface in section Portal Content, you can assign the customized authentication to certain iViews.

The customized authentication can also be specified in the deployment descriptor portalapp.xml of an iView.

 

Running the Customized Authentication

After all the changes on the portal configuration are finished, restart the server and logon to the portal.