KAAJEE) VERSION 1.2.0 and SECURITY SERVICE PROVIDER INTERFACE (SSPI) VERSION 1.2.0
Total Page:16
File Type:pdf, Size:1020Kb
KERNEL AUTHENTICATION & AUTHORIZATION FOR J2EE (KAAJEE) VERSION 1.2.0 and SECURITY SERVICE PROVIDER INTERFACE (SSPI) VERSION 1.2.0 FOR WEBLOGIC (WL) VERSIONS 10.3.6 AND HIGHER DEPLOYMENT GUIDE July 2020 Department of Veterans Affairs Office of Information and Technology Product Development This page is left blank intentionally. Revision History Documentation Revisions The following table displays the revision history for this manual. Revisions to the documentation are based on patches and new versions released to the field. Table i. Documentation revision history Date Description Author(s) 07/2020 Software and documentation for KAAJEE 1.2.x.x, HPS Admin Single Sign-On Web Application Plugin (SSOWAP) 1.1.0.xxx and KAAJEE Security Service Provider REDACTED Interface (SSPI) 1.2.0.005 referencing VistALink 1.6 and WebLogic 10.3.6 and higher. Kernel Patches: XU*8.0*694 and XU*8.0*696 03/2011 Software and documentation for KAAJEE 1.1.0.007 Product Development Services and KAAJEE Security Service Provider Interface Security Program HWSC (SSPI) 1.1.0.002, referencing VistALink 1.6 and development team. WebLogic 9.2 and higher. Bay Pines, FL OIFO: Software Version: 1.1.0.007 • REDACTED Security Service Provider Interface (SSPI) Version: 1.1.0.002 Oakland, CA OIFO: Kernel Patch: XU*8.0*504 REDACTED 05/2006 Initial software and documentation for Kernel ISS KAAJEE Development Team, Authentication and Authorization Java (2) Enterprise Oakland, CA Oakland Office of Edition (KAAJEE) 1.0.0.019 and KAAJEE SSPIs Information Field Office (OIFO): 1.0.0.010, referencing VistALink 1.5 and WebLogic 8.1 (SP4 or higher). REDACTED Software Version: 1.0.0.019 SSPI Version 1.0.0.010 REF: For a description of the current KAAJEE software version numbering scheme, please review the readme.txt file distributed with the KAAJEE software. • July 2020 Kernel Authentication and Authorization Java (2) Enterprise Edition (KAAJEE) iv Deployment Guide Version 1.2 on WebLogic 10.3.6 and higher Revision History Date Description Author(s) Patch Revisions For a complete list of patches related to this software, please refer to the Patch Module on FORUM. NOTE: Kernel is the designated custodial software application for KAAJEE; however, KAAJEE comprises multiple patches and software releases from several HealtheVet-VistA applications. July 2020 Kernel Authentication and Authorization Java (2) Enterprise Edition (KAAJEE) v Deployment Guide Version 1.2 on WebLogic 10.3.6 and higher Contents Revision History .......................................................................................................................................... iv Figures .......................................................................................................................................................... x Tables .......................................................................................................................................................... xii Orientation ................................................................................................................................................. xiv I. User Guide ...................................................................................................................................... I-1 1. KAAJEE Overview .................................................................................................................... 1-1 Introduction ............................................................................................................................... 1-1 Security Service Provider Interfaces (SSPI) .............................................................................. 1-6 KAAJEE Process Flow Overview ............................................................................................. 1-8 Using Industry Standard Form-based Authentication ............................................................... 1-9 KAAJEE's Use of Form-based Authentication ....................................................................... 1-10 Container Security Detecting Authorization Failures ............................................................. 1-11 KAAJEE J2EE Web-based Application Login Page............................................................... 1-12 2. Future Software Implementations .............................................................................................. 2-1 Outstanding Issues ..................................................................................................................... 2-1 Future Enhancements ................................................................................................................ 2-1 II. Developer's Guide ......................................................................................................................... II-1 3. KAAJEE Installation Instructions for Developers ..................................................................... 3-1 Dependencies: Preliminary Considerations for Developer Workstation Requirements ............ 3-1 Dependencies: KAAJEE and VistALink Software ................................................................... 3-3 Dependencies: KAAJEE-Related Software Applications/Modules .......................................... 3-3 KAAJEE Installation Instructions ............................................................................................. 3-4 4. Integrating KAAJEE with an Application ................................................................................. 4-1 Assumptions When Implementing KAAJEE ............................................................................ 4-1 Software Requirements/Dependencies ...................................................................................... 4-2 Web-based Application Procedures to Implement KAAJEE .................................................... 4-3 SSO/UC/CCOW Functionality Enabled .................................................................................. 4-15 5. Role Design/Setup/Administration ............................................................................................ 5-1 1. Declare Groups (weblogic.xml file) .................................................................................... 5-2 July 2020 Kernel Authentication and Authorization Java (2) Enterprise Edition (KAAJEE) vi Deployment Guide Version 1.2 on WebLogic 10.3.6 and higher Contents 2. Create VistA M Server J2EE Security Keys Corresponding to WebLogic Group Names . 5-3 3. Declare J2EE Security Role Names .................................................................................... 5-3 4. Map J2EE Security Role Names to WebLogic Group Names (weblogic.xml file) ............ 5-4 5. Configure Web-based Application for J2EE Form-based Authentication .......................... 5-4 6. Protect Resources in Your J2EE Application ...................................................................... 5-5 7. Grant Special Group to All Authenticated Users (Magic Role) .......................................... 5-5 8. Administer Users ................................................................................................................. 5-6 9. Administer Roles ................................................................................................................. 5-6 6. KAAJEE Configuration File ...................................................................................................... 6-1 KAAJEE Configuration File Tags ............................................................................................. 6-1 Suggested System Announcement Text .................................................................................... 6-4 KAAJEE Configuration File (i.e., kaajeeConfig.xml) .............................................................. 6-5 7. Programming Guidelines ........................................................................................................... 7-1 Application Involvement in User/Role Management ................................................................ 7-1 J2EE Container-enforced Security Interfaces ............................................................................ 7-1 J2EE Username Format ............................................................................................................. 7-1 LoginUserInfoVO Object .......................................................................................................... 7-2 VistaDivisionVO Object ........................................................................................................... 7-8 VistALink Connection Specs for Subsequent VistALink Calls .............................................. 7-10 Providing the Ability for the User to Switch Divisions ........................................................... 7-11 logout.jsp File .......................................................................................................................... 7-12 III. Systems Management Guide ...................................................................................................... III-1 8. Implementation and Maintenance .............................................................................................. 8-1 Namespace ................................................................................................................................. 8-1 Site Configuration ..................................................................................................................... 8-1 Security