Hi

I have 2 self services application that i would like to make secure: I have to group of users, one of them access the first self service application and the second the second self service application.
I know the different options to configure security but i do not know how to make the server distinguish the users.

For information we dod not want to use MRE.

Any idea would be greatly appreciated.

Regards.

This message has been edited. Last edited by: Kerry,

In the WebFOCUS client, you can define multiple client nodes (in the Remote Servers section of the client console). In the login/launch pages of your secure apps, you can specify these logical nodes in the IBIC_server variable.

In addition, if there is no overlap between the sets of users, you might want to keep a list of 'registered' users per application and check the IBIC_user coming in against a list for that particular application.

We use pieces/parts of the above at our site.

Hi Ginny,

But I have only one server with multiple application. Why should create different nodes?.

Regards.

You don't have to do that but it would be one way to differentiate the applications.

At our site, we are all self-service with mostly non-secure applications. Those all go through the EDASERVE client node with a default application id to authenticate against the reporting server.

We have another node called WFEXTSEC which must be driven by a login page that does a WF_SIGNON action that forces it through an exit to validate the login credentials against LDAP. Those credentials are placed in special variables to be used for data base authentication and an application id is used for reporting server authentication. That way the application user doesn't have to have an id on our Unix box. Additionally, certain applications maintain a list of registered users for their application that they can check against the validated logged-on user.

I'm not saying to have to do it this way. It was just an idea.

How are you authenticating your users so that you know who they are?

Hi Ginny,

I read the security documentation and found that one option is to use the LDAP. This is what we are familiar with and what i will use for this pupose.
Other question may come later when i will start testing it. I think i will start that on wednesday.

Regards.

You can also set up user profiles where you could specify different application paths for different users or groups of users. Based on the IBIC_user, you could modify the path so one user cannot even see or access the master files and fexes available in another application folder. This assume that those files are currently separated into their own application folders on the Wf Server.

Hi Darin,

Thanks for the suggestion i saw that also in the documentation but did not try it yet.
I will share my experience with all of by the end of the week.

Regards