Date: 24-Nov-2009 URL: global/training/catalog/courses/WMO-AM-3480.xml

Sun Java System Access Manager: Configuration and Customization (WMO-AM-3480)

The Sun Java System Access Manager: Configuration and Customization course provides students with a description of the role of the Sun Java System Access Manager (Access Manager) in an identity management solution. Students learn to configure, manage, administer, and customize Access Manager services, authentication, authorization, and federated identity. This comprehensive course covers a number of identity management concepts and Access Manager functions that range in complexity from introductory to advanced. This course does not cover basic installation, Java technology programming, Extensible Markup Language (XML), Lightweight Directory Access Protocol (LDAP), and Sun Java System Directory Server (Directory Server) concepts. These topics are covered in other Sun courses.

The printable Student Guide and Student Workbook included in this Online Lecture are similar to those in the instructor led version of this course. In some cases, these guides refer to lab files used by an instructor in the classroom. Such downloadable lab files have not been provided in the online version.

»	Details below

Web-based courses purchased on the Web site may only be used in Australia. If you reside outside Australia please select a country to inquire about products delivered in your country.

Technical Requirements

Before purchase, please review:

Macromedia Flash requirements

Additional SW HW Requirements

JavaScript

Languages

English

Format

Online Lecture

Course Features and Services

Who Can Benefit

Students who can benefit from this course are system engineers, professional services consultants, application developers, architects, and other technical personnel. The course is designed for those who must implement the Access Manager in an existing infrastructure and adapt the product's appearance and functionality to suit the specific enterprise requirements.

Prerequisites

To succeed fully in this course, students should be able to:

Demonstrate proficiency with the Solaris Operating System (Solaris OS)
Install the Sun Java Enterprise System
Demonstrate proficiency with XML and interpret Document Type Definition (DTD) files
Demonstrate familiarity with Hypertext Markup Language (HTML)
Demonstrate familiarity with Java programming and JavaServer Pages [JSP pages]

Skills Gained

Upon completion of this course, students should be able to:

Define the role of the Access Manager and list the features and functions of the Access Manager that address key business challenges
Configure the Access Manager and Policy Agents
Configure and customize authentication and single sign-on (SSO)
Configure, administer, personalize, and customize authorization
Describe the Security Assertions Markup Language (SAML) and federated identity, and their implementation in Access Manager
Implement advanced deployment scenarios, including cross-domain single sign-on (CDSSO) and high availability

Related Courses

Before:

Sun Java Enterprise System 2005Q1: Core Concepts (ECR-2281)
Sun Java Enterprise System: Installation and Administration (ECR-2389)

Course Content

Module 1 - Sun Java System Access Manager

Describe identity management
Describe network identity implementation
Describe the Sun Java System identity management framework
Identify Access Manager components
Describe Policy Agent software
Examine a case study

Module 2 - Configuring and Deploying the Access Manager

Identify deployment components
List basic deployment scenarios
Start and stop Access Manager and Policy Agent instances
Describe Access Manager configuration
Configure Policy Agent instances
Configure secure sockets layer (SSL) with the Access Manager

Module 3 - Access Manager Realms

Describe the types of data the Access Manager uses
Describe Access Manager realms
Describe realm and legacy modes
Describe identity repository types
Configure identity repositories
Describe Access Manager management tools
Create and configure realms
Delegate administration

Module 4 - Service Configuration

Describe Access Manager services
Configure Access Manager services using the console
Configure Access Manager services using the command-line interface (CLI)
Describe service configuration for new realms

Module 5 - Logging and Debugging

Describe the Access Manager Logging Service
Describe debug files
Describe Policy Agent logging

Module 6 - Authentication and Single Sign-On

Describe Access Manager authentication
Describe the Access Manager authentication architecture
Describe the mechanism for non-programmatic authentication
Describe the mechanism for programmatic authentication
Configure Access Manager authentication
Describe the authentication process
Describe Access Manager sessions
Describe SSO
Constrain user sessions

Module 7 - Customizing Authentication

Describe the Access Manager authentication interface and its architecture
Configure a customized authentication interface
Describe authentication interface JSP templates
Customize an authentication interface

Module 8 - Policy Configuration

Describe policy
Describe the policy architecture
Describe policy components
Describe policy storage
Administer policy
Configure policies using the console

Module 9 - Policy Evaluation

Describe policy evaluation principles
Examine a policy evaluation example
Describe policy interoperability

Module 10 - Security Assertion Markup Language

Describe SAML
Describe SSO system flow using SAML
Configure SAML support on the Access Manager

Module 11 - Federated Identity

Describe the Liberty Alliance project
Describe the Liberty specification
Identify Liberty web services
Describe the identity federation process and user experience
Describe Liberty process flow

Module 12 - Advanced Deployment

Describe cross-domain single sign-on (CDSSO)
Describe and configure distributed authentication
Run Access Manager from a user account other than the root account
Describe and configure high availability
Describe and configure persistent searches
Describe and configure session caching options