Teamcenter 10.1 Security Services Installation/Customization Publication Number TSS00001 R Proprietary and restricted rights notice This software and related documentation are proprietary to Siemens Product Lifecycle Management Software Inc. © 2013 Siemens Product Lifecycle Management Software Inc. All Rights Reserved. Siemens and the Siemens logo are registered trademarks of Siemens AG. Teamcenter is a trademark or registered trademark of Siemens Product Lifecycle Management Software Inc. or its subsidiaries in the United States and in other countries. All other trademarks, registered trademarks, or service marks belong to their respective holders. 2 Security Services Installation/Customization TSS00001 R Contents Proprietary and restricted rights notice . 2 Getting started with Security Services . 1-1 Getting started with Security Services . 1-1 Siemens PLM Software customization support . 1-2 Prerequisites . 1-3 Basic concepts about Security Services . 1-4 Security Services components . 1-7 Installing Security Services . 2-1 Installing Security Services . 2-1 Basic guidelines . 2-1 Basic installation process . 2-2 Upgrade to Security Services 10.1 . 2-2 Installation files . 2-3 Create the WEB_ROOT directory . 2-3 Copy installation files from the software distribution image . 2-4 Launch the Web Application Manager . 2-5 Create the Login Service . 2-5 Create the Identity Service . 2-8 Logging Teamcenter application information . 2-9 Setting up an LDAP server for Security Services . 3-1 Setting up an LDAP server for Security Services . 3-1 LDAP requirements . 3-1 Configuring Security Services . 4-1 Configuring Security Services . 4-1 Context parameter worksheets . 4-1 Debugging Teamcenter Security Services . 4-14 Configuring the Login Service . 4-15 Configuring the Identity Service . 4-18 Configuring the secure socket layer (SSL) . 4-25 Deploying Security Services on Web application servers . 4-28 Setting environment variables . 5-1 Setting environment variables . 5-1 Verifying Security Services . 6-1 Verifying Security Services . 6-1 Test Identity Service . 6-1 Test Login Service . 6-1 Test Java API documentation . 6-3 TSS00001 R Security Services Installation/Customization 3 Contents Verify DNS lookup of Active Directory domain controllers . 6-3 Customizing Security Services . 7-1 Customizing Security Services . 7-1 Customize client-certificate authentication . 7-1 Customize the display notice and consent logon banner . 7-5 Customize the logon window . 7-7 Customizing the identity provider . 7-8 Interoperating with commercial SSO products . 7-8 Interoperating with a password management facility . 7-10 Using smart card authentication . 8-1 Using smart card authentication . 8-1 Using Kerberos authentication . 9-1 Using Kerberos authentication . 9-1 Troubleshooting . 10-1 Troubleshooting . 10-1 General considerations . 10-1 Third-party configuration considerations . 10-8 Kerberos considerations . 10-13 Localization . A-1 Localization . A-1 Installation prerequisites for localized installations . A-1 Perform the localization installation . A-2 Configuring Teamcenter products . B-1 Configuring Teamcenter products . B-1 Teamcenter configuration . B-2 Teamcenter Enterprise configuration . B-4 Engineering Process Management configuration . B-5 Portfolio, Program and Project Management configuration . B-7 Systems Engineering and Requirements Management configuration . B-8 Community Collaboration configuration . B-8 Lifecycle Visualization configuration . B-9 Product Master Management configuration . B-9 WebSEAL, SiteMinder, File Management System (FMS), and two-way SSL for reverse proxy support . C-1 WebSEAL, SiteMinder, File Management System (FMS), and two-way SSL for reverse proxy support . C-1 Session cookie sharing with FMS . C-1 Reverse proxy servers . C-2 Glossary . D-1 Index . Index-1 4 Security Services Installation/Customization TSS00001 R Contents Figures Security Services components . 1-6 Security Services communication flow . 1-10 Teamcenter Web Application Manager dialog box . 2-5 Advanced Web Application Options dialog box . 2-6 Select Solutions dialog box . 2-7 Add Web Application dialog box . 2-8 Select Solutions dialog box . 2-9 Modify Table dialog box: SSO Token Specification Table . 4-20 Add Row to Table – SSO Token Specification Table dialog box . 4-21 Modify Table dialog box: LDAP Domain map . 4-23 Modify Table dialog box: Referral Credentials Table . 4-24 Java API documentation . 6-3 Enable notice and logon banner . 7-5 Sample files in the login_banner.zip file . 7-6 Add Row to Table – Login Input Definitions dialog box . 7-7 Example of a smart card . 8-1 Login Service parameters for the Weblogic application server . 9-5 Login Service parameters for the JBOSS application server . 9-6 Application Registry Table . 9-6 WebSEAL session cookie sharing . C-3 SiteMinder session cookie sharing . C-4 TSS00001 R Security Services Installation/Customization 5 Chapter 1 Getting started with Security Services Getting started with Security Services . 1-1 Siemens PLM Software customization support . ..