IBM Software Group

IBM : Virtual Member Manager (VMM)

Presented by : Ankita Nanwani (VMM Developer)

(ankita.nanwani@in.ibm.com)

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager2

Agenda

VMM - Usage ScenariosBusiness Use CaseWhat is “Federated Repository” ?WAS User Registry OptionsVMM - FeaturesVMM - BenefitsVMM - Functional OverviewReferences

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager3

VMM – Usage Scenarios

What is the problem which Federated Repository (VMM) is trying to solve ?

Merge Distributed data across companies Combining data across companies Bank Mergers, company acquisitions Company divisions, Business Partners Federated Identity Management and Security And Many more…

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager4

Bank of Tivoli and Cognos PortalBill Payment

Utility

Bank of Tivoli Bank of Cognos

User repository LDAP A

merger

Bank of Tivoli and Cognos

User repository LDAP B

User repository LDAP A

User repository LDAP B

User B authentication

User A authentication

Customer A

Customer B

Virtual Member Manager

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager5

What is “Federated Repository?”

Integrated with WebSphere Application Server (WAS 6.1 and above) security

As a user registry option “Federated repositories” To Support authentication using JAAS and access control

using JACC Federation Capabilities provided by the Virtual Member

Manager (VMM) component Administrative utilities to manage (existing) users and groups

through Administrative console Command Line Utilities Public APIs

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager6

WAS User Registry Options

User repository options: Comparison

NoYesIdentity Profile Support

Only read supportBoth read/write supportRegistry Read/Write Support

NoYesSimultaneous Multi-Registry Support

Local Operating System Standalone LDAP Standalone Custom

File (built in) LDAP DB Custom

Supported Registries

Other User Repository OptionsFederated Repositories

NoYesIdentity Profile Support

Only read supportBoth read/write supportRegistry Read/Write Support

NoYesSimultaneous Multi-Registry Support

Local Operating System Standalone LDAP Standalone Custom

File (built in) LDAP DB Custom

Supported Registries

Other User Repository OptionsFederated Repositories

Configuration available only with wsadmin and VMM APIs

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager7

VMM - Features

Ability to use multiple repositories simultaneously for user registry

Provides a single model for user/organizational information

Repository-independent schema and API for managing users and groups

Federation creates a single name space for identities

Supports the logical joining of entries across multiple user registries

Support for a property extension repository

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager8

VMM - Benefits

A single user/org/group identity, profile and relationship management component

Repository SPI allows using already existing customer (populated) repositories as well as new emerging technologies

Facilitates sharing of identities, profiles and relationships by applications.

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager9

VMM – Functional Overview

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager10

References

http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/index.jsp?topic=/com.ibm.websphere.wim.doc.en/welcome.html

http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/topic/com.ibm.websphere.wim.doc.en/overview.html 

http://www.ibm.com/developerworks/websphere/techjournal/0701_ilechko/0701_ilechko.html

IBM Software Group | WebSphere/Tivoli software

Virtual Member Manager11

Thanks!!