The general authentication service must be registered as a service to a realm before any user can log in using the other authentication modules types. The Core authentication service allows the OpenSSO administrator to define default values for a realm's authentication parameters. These values can then be used if no overriding value is defined in the specified authentication module. The default values for the Core Authentication Service are defined in the amAuth.xml file and stored in Directory Server after installation.
The Authentication properties are:
Clicking the Advanced Properties button displays the Core authentication attributes that can be defined for the realm. The global attributes are not applicable to the realm so they are not displayed.
Defines the authentication chain to be used for the realm. Once you create a new chain in the Authentication Chaining attribute, it appears in the pull-down list and is available for you to select. See To Create a New Authentication Chain for more information.
Defines the authentication chain for administrators only. This attribute can be used if the authentication chain for administrators needs to be different from the chain for end users. The modules configured in this attribute are inherited when the OpenSSO console is accessed.
Specifies the URL that the user will be redirected to upon successful authentication to the realm.
Enables you to define and configure the OpenSSO default authentication modules for the realm. You can add multiple instances of the same authentication module. See To Create a New Authentication Module Instance for more information.
One or more authentication modules can be configured so a user must pass authentication credentials to all of them. This is referred to as authentication chaining. this attribute enables you to define the authentication chaining options for the realm. The chains you create are displayed in the Default Authentication Chain list. SeeTo Create a New Authentication Chain for more information.