Access Manager 7.1: Configuration and Customization

start > courses and registration > training feature sheet

Access Manager 7.1: Configuration and Customization :: [AM-3480]

course schedule			who can benefit
prerequisites			skills gained
other notes			course content
related solutions

code.

AM-3480

length.

5 days

type.

Instructor-Led

partner.

Sun Microsystems

price.

$3,500 :: $2,975 GSA GOV.

Sun Java System Access Manager is a security foundation that helps organizations manage secure access to an enterprise web application both within the enterprise and across business-to-business value chains. It provides open, standards-based authentication and policy-based authorization with a single, unified framework. It secures the delivery of essential identity and application information to meet current needs and to scale with growing business needs, by offering single sign-on, as well as enabling federation across trusted networks of partners, suppliers, and customers. The Sun Java System Access Manager: Configuration and Customization course provides students with a description of the role of Access Manager in an identity management solution. Students learn to configure, manage, administer, and customize Access Manager services, authentication, authorization, and federated identity. This comprehensive course covers a number of identity management concepts and Access Manager functions that range in complexity from introductory to advanced. This course does not cover basic installation, Java technology programming, Extensible Markup Language (XML), Lightweight Directory Access Protocol (LDAP), and Sun Java System Directory Server (Directory Server) concepts. These topics are covered in other Sun courses. The hands-on labs offered in this course might involve accessing equipment that resides at a location other than where the training is delivered.

Sacramento, CA	dec.15.2008 - dec.19.2008	register
San Francisco, CA	nov.17.2008 - nov.21.2008	register
San Jose, CA	dec.1.2008 - dec.5.2008	register
Phoenix, AZ	nov.3.2008 - nov.7.2008	register

Arlington, VA	sep.8.2008 - sep.12.2008	register
Arlington, VA	oct.27.2008 - oct.31.2008	register
Baltimore, MD	oct.20.2008 - oct.24.2008	register
Burlington, MA	sep.15.2008 - sep.19.2008	register
Burlington, MA	nov.3.2008 - nov.7.2008	register
Dallas, TX	aug.18.2008 - aug.22.2008	register
Dallas, TX	dec.8.2008 - dec.12.2008	register
Downers Grove, IL	sep.8.2008 - sep.12.2008	register
Downers Grove, IL	dec.8.2008 - dec.12.2008	register
Edison, NJ	oct.6.2008 - oct.10.2008	register
Seattle, WA	dec.8.2008 - dec.12.2008	register
Tampa, FL	dec.15.2008 - dec.19.2008	register

who can benefit

Students who can benefit from this course are system engineers, professional services consultants, application developers, architects, and other technical personnel. The course is designed for those who must implement Access Manager in an existing infrastructure and adapt the product appearance and functionality to suit the specific enterprise requirements.

prerequisites

To succeed fully in this course, students should be able to:

	Demonstrate proficiency with the Solaris Operating System (Solaris OS)
	Navigate a directory information tree (DIT)
	Install the Sun Java Enterprise System
	Demonstrate proficiency with XML and interpret Document Type Definition (DTD) files
	Demonstrate familiarity with Hypertext Markup Language (HTML)
	Demonstrate familiarity with Java programming and JavaServer Pages [JSP(TM)pages]
	Demonstrate familiarity with Hypertext Markup Language (HTML)
	Demonstrate familiarity with Java programming and JavaServer Pages(JSP(TM)pages)

skills gained

Upon completion of this course, students should be able to:

	Define the role of Access Manager and list the features and functions of Access Manager that address key business challenges
	Configure Access Manager and Policy Agents
	Configure and customize authentication and SSO
	Configure, administer, personalize, and customize authorization
	Describe the Security Assertions Markup Language (SAML) and federated identity, and their implementation in Access Manager
	Implement advanced deployment scenarios, including high availability

related courses, exams and materials

	before related training and products

	ECR-2281 Sun Java Enterprise System: Core Concepts
	ECR-2389 Sun Java Enterprise System: Installation and Administration

course content details

	Module 1 - Installing Sun Java System Access Manager

	Define identity and federated identity
	Describe the Sun Java System identity management framework
	Identify Access Manager components
	Describe Policy Agent software
	Describe the hardware and pre-installed files on your lab system
	Install the Sun Java System Directory Server Enterprise Edition and Sun Java System Web Server software
	Install the Access Manager software

	Module 2 - Configuring and Deploying Access Manager and Policy Agent Software

	Identify deployment components
	List basic deployment scenarios
	Identify Java ES installation options that impact deployment
	Describe Access Manager configuration
	Configure Policy Agent instances
	Configure the secure sockets layer (SSL) with Access Manager
	Start and stop Access Manager and Policy Agent instances
	Secure the Access Manager web container
	Configure the Access Manager instance
	Configure the Example Chocolates web site
	Install and configure Policy Agent software

	Module 3 - Configuring Access Manager Realms

	Describe the types of data that Access Manager uses
	Describe Access Manager realms
	Describe realm and legacy modes
	Describe data store types
	Configure data stores
	Describe Access Manager management tools
	Create and configure realms
	Prepare the Example Chocolates user directory
	Create a realm using the CLI
	Create and configure realms using the console and the CLI

	Module 4 - Configuring Access Manager Services

	Describe Access Manager services
	Configure Access Manager services using the console
	Configure Access Manager services using the CLI
	Describe service configuration for new realms
	Locate service files
	Configure the Session Service using the CLI
	Configure the Session Service using the console
	Describe the service configuration for a new realm

	Module 5 - Logging, Debugging, and Monitoring

	Locate, configure, and interpret Access Manager log files and database tables
	Locate and configure debug files
	Locate and configure Policy Agent log files
	Monitor Access Manager instances using Java ES monitoring
	Review Access Manager log files
	Log on to a relational database
	Enable message-level debugging
	Monitor Java ES objects (optional)

	Module 6 - Configuring Authentication

	Describe the Access Manager authentication process
	Configure Access Manager authentication
	Configure Access Manager sessions
	Describe SSO
	Configure a customized authentication interface
	Configure data store authentication
	Configure an authentication chain with multiple authentication module instances
	Configure account lockout for a realm
	Use Access Manager for programmatic authentication (optional)
	Customize the authentication interface templates for a realm (optional)
	Localize the authentication interface for a realm (optional)

	Module 7 - Configuring Policy

	Describe policy
	Describe the policy architecture
	Describe policy components
	Describe policy storage
	Administer policy
	Configure policies using the console
	Delegate administration
	Configure a different default login URL in the Policy Agent
	Create policies for the Example Chocolates web site
	Create a policy that uses realm authentication
	Delegate administration to users

	Module 8 - Exploring Policy Evaluation

	Describe policy evaluation principles
	Examine a policy evaluation example
	Locate policy evaluation request and policy decision documents and review the Access Manager policy log files

	Module 9 - Analyzing Federated Identity Scenarios

	Define federated identity
	Identify business scenarios addressed by federated identity
	Describe basic federated identity technologies and how they solve business problems
	Describe federation frameworks
	Describe the Security Assertion Markup Language (SAML)
	Analyze business problems addressed by federated identity and describe technologies that provide solutions

	Module 10 - Configuring SAML Version 1 Single Sign-On

	Describe SAML 1 assertions, protocols, and bindings
	Describe SAML 1 profiles
	Configure SAML 1 support on Access Manager
	Sign SAML assertions
	Configure SSO using SAML version 1.1

	Module 11 - Examining Advanced Federation

	Describe advanced federated identity technologies
	Identify advanced identity federation frameworks
	Describe framework implementation in Access Manager
	Federate accounts on an identity provider and a service provider
	Federate and defederate accounts

	Module 12 - Deploying Access Manager for High Availability

	Describe cross-domain single sign-on (CDSSO)
	Describe and configure distributed authentication
	Describe and configure high availability
	Perform advanced configuration
	Configure and secure new Web Server instances
	Configure a second Access Manager instance
	Configure the Policy Agent to fail over to the second Access Manager instance
	Configure the Policy Agent to work with load-balanced Access Manager instances