
Pre-requisites to Integration
Before you begin the integration, make sure that:
• Siebel and all of its required components, including the web server and the database server, are installed and running in the environment. For detailed information on how to do this, please refer to the Siebel Bookshelf.
• Sun ONE Identity Server, including Sun ONE Directory Server, is installed and running. For information on how to install these products, please refer to the Sun ONE Identity Server product documentation.
Integration Steps
Once you have the products mentioned above installed and running, follow the steps listed below to enable Web SSO between Siebel 7.5 (check out for your specific application version on SUNs site) and Sun ONE Identity Server.
1. Set up Sun ONE Directory Server 5.1 so that the database accounts and the user’s Siebel uid can be retrieved.
Users in the Siebel database must correspond to users in Sun ONE Directory Server.
Users in Sun ONE Directory Server must have attributes containing values for Siebel uid, password and database account. Attribute names must correspond to what is configured in the web server plug-in configuration file, eapps.cfg, and the Call Center configuration file, uagent.cfg. The web server plug-in configuration file is located in $WEB_PLUGIN_HOME/bin directory on the web server machine. The Call Center configuration file is located in $SIEBEL_HOME/siebsrvr/bin directory on the Siebel server machine. If you are using a Siebel application other than Call Center, make sure you look at that particular application’s configuration file rather than the Call Center configuration file.
2. Edit the parameters in the web server plug-in configuration file, eapps.cfg, residing on the web server machine to have the following values:
Code Example 1
[defaults]
AnonUserName = sadmin
AnonPassword = sadmin
AnonUserPool = 120
StatsPage = _stats.swe
HTTPPort = 8080
HTTPSPort = 443
EnableFQDN = FALSE
FQDN = CHANGE_ME
AnonSessionTimeout = 900
GuestSessionTimeout = 300
SessionTimeout = 900
DoCompression = TRUE
SingleSignOn = TRUE
TrustToken = siebel2sun
UserSpec = REMOTE_USER
UserSpecSource = Header
3. Edit the parameters in the Call Center configuration file, uagent.cfg, as described below. If you are using another Siebel application, make sure to edit the appropriate configuration file in a similar manner (see Appendix C).
Code Example 2
[LDAP]
DllName = libsscfldap.so
ServerName = e450b.sunmde.com
Port = 389
BaseDN = "ou=People,o=siebel.com"
SharedCredentialsDN = "uid=sadmin,ou=People,o=siebel.com"
UsernameAttributeType = uid
PasswordAttributeType = userPassword
CredentialsAttributeType = dbaccount
;RolesAttributeType = siebelrole
;SslDatabase =
ApplicationUser = "uid=amAdmin,ou=People,o=siebel.com"
ApplicationPassword = netscape1
;EncryptApplicationPassword = FALSE
;EncryptCredentialsPassword = FALSE
SingleSignOn = TRUE
TrustToken = siebel2sun
;UseAdapterUsername = FALSE
;SiebelUsernameAttributeType =
;UseRemoteConfig =
4. Install Sun One Identity Server Policy Agent, version 2.0 on the web server hosting the Siebel application. For information on how to install this agent, please refer to the policy agents documentation at http://docs.sun.com/db/coll/S1_IdServ_60.
5. Modify the file amAgent.properties to allow the policy agent to set values in the HTTP header. The amAgent.properties file is the configuration file for the policy agent. It is typically located in /etc/opt/SUNWam/agents/es6/config/_opt_SUNWam_servers_
com.sun.am.policy.am.fetchHeaders=true
com.sun.am.policy.am.headerAttributes=uid|uid
6. Create policies in Sun ONE Identity Server 6.0 to allow/deny access to your Siebel application. The steps for creating policies are documented in the Sun ONE Identity Server Administration Guide, which is located at http://docs.sun.com/source/816-6686-10/index.html.
Policies can be set on users, roles, or organizations. For this integration, policies have been set on the organization.
7. Stop the Web Server, Web Server Admin, Siebel Server, and then the Gateway Server. Restart them in the reverse order.
To verify if the integration is successful, access the Call Center application URL. You will redirected to Sun ONE Identity Server login page for authentication and upon successful authentication, you will be able to access the Call Center application.
Note: This informations has very well been documented in http://docs.sun.com. For more information refer to SUNs site.




