Configuring The Agent For Direct Access; Protecting The Application Server With The Access Gateway - Novell ACCESS MANAGER 3.1 SP1 - AGENT GUIDE Manual

2.2.2 Protecting the Application Server with the Access
Gateway
When you configure the Access Gateway to protect the application server, the communication
process follows the paths illustrated in
The J2EE Server as a Protected Resource
Figure 2-2
2 4
Browser
1. The user requests access to the application server by using a published DNS name. The request
is sent to the Access Gateway, and the Access Gateway proxies the request to the agent.
2. The agent redirects the request back to the Access Gateway, and the Access Gateway redirects
the user to the Identity Server, which prompts the user for a username and password.
3. The Identity Server verifies the username and password against a user store (an LDAP
directory).
4. The Identity Server builds the roles for the user and redirects the user back to the Access
Gateway.
5. The Access Gateway directs the user's request to the application server.
6. The agent verifies the user's credentials and obtains the user's role information.
7. The application server allows the user to access to the requested application.
For configuration information, see
Gateway," on page 53.

2.3 Configuring the Agent for Direct Access

1 In the Administration Console, click Devices > J2EE Agents > Edit.
Figure 2-2.
Identity Server
Access Gateway
4
1
Section 2.5, "Protecting the Application Server with the Access
3
6
5
1
J2EE Server with
Agent and Applications
Configuring the Agent for Authentication
LDAP
Directories
7
47