Stack Overflow
Stack Overflow

Questions tagged [ltpa]

LTPA - Lightweight Third-Party Authentication is a IBM provided mechanism to achieve Single Sign-On between IBM WebSphere servers and Lotus Domino servers. Once a user is successfully authenticated a LTPA token will be stored as a cookie in the user's web browser, providing who the authenticated user is to other servers in the same configured SSO domain.

LTPA - Lightweight Third-Party Authentication is a IBM provided mechanism to achieve Single Sign-On between IBM WebSphere servers and Lotus Domino servers. If the server is configured to use LTPA, the server first checks for a valid LTPA token for the SSO domain the server has been configured for. If the LTPA token is not yet present the user must authenticate normally.

Technology

In order for a server to use the LTPA authentication mechanism, it must first be configured to do so. When configuring the usage of LTPA between servers, the servers must be in the same domain (also configured in the LTPA configuration) and use the same LTPA SSO key as each other. Once the user has been authenticated the first time, the server creates two cookies: LtpaToken and LtpaToken2. The latter is the latest version of the token, the former is used for backward compability with older servers. The cookies are encrypted and contains (as a minimum requirement) the user's login.

When the same user accesses another server in the same SSO domain, the user will not need to re-authenticate. The server will read the LTPA token and after validating it accept the users authentication.

The LTPA token is time sensitive and will eventually expire. As a result it is important that the time on the server is synchronized as the server might otherwise consider a fully valid token as invalid. How long the token is valid for is configured on the server.

More information

88 questions
1
vote
1 answer

How to generate LTPA token for WebSphere Liberty Profile

Is there any utility that can be used to generate LTPA token keys for the WebSphere Liberty Profile. I am aware of the Liberty generating token by itself whenever we start the liberty server. Also I have found a utility which helps one to generate…
krckumar
  • 544
  • 4
  • 21
1
vote
0 answers

Websphere: set user for LTPA token

Running under WebSphere 8 I have an EJB that calls a SOAP web service (using JAX-WS-generated client code). The authentication to the web service is done via LTPA token. Currently Websphere is configured (using a Policy Set and Binding) to…
Thomas Stets
  • 3,015
  • 4
  • 17
  • 29
1
vote
1 answer

Unable to deserialize the Subjects in this Context, cause: SecurityName is null

I recently implemented LTPA (LDAP) authentication for a WebSphere application. I've since seen the following error when attempting to make a web service call to an endpoint on a different domain:
Will
  • 310
  • 2
  • 4
  • 10
1
vote
0 answers

Authenticate to website in Javascript to access back-end

I am currently developing an application for my company that is essentially a phone book application. Let's say that you are a manager - named Alex - and have 3 developers reporting to you: Mike, Matt and Mark. In order to gather the contact…
Michael Amato
  • 55
  • 9
1
vote
1 answer

Use of LTPA user data collection

I saw the LTPA token contains the following: "... token expiration time, the user identity (usually the LDAP distinguished name), and a digital signature. The signature covers the user data collection (the user identity plus any optional key-value…
Court
  • 11
  • 2
1
vote
1 answer

LTPA Timeout Handling In Application Level

In one of a project, a client asks to extend the LTPA timeout for a project. We can not extend the LTPA timeout in server level. Because the server(WAS 7) has more projects. So I have googled and in IBM site I got a solution, it says, LTPA timeout =…
Arunkumar
  • 23
  • 4
1
vote
1 answer

IBM Websphere Application Server and LTPA token generation

I have set up the SSO between 2 WAS cells and its being verified. LDAP is being configured in both WAS cells. My question is how to generate the LTPA token which contains the mail or the employee id in it ? In my case the LTPA token generated…
Anupam K
  • 309
  • 1
  • 4
  • 17
1
vote
1 answer

Set LTPA token in HTTP Request header

I want to invoke a REST service that is hosted on WAS. I would like to know how to set the ltpa token in the HTTP Request header while invoking the service using SOAPUI. Can I set the token in the Cookie field of the header? If so, what is the…
user2593173
  • 317
  • 1
  • 5
  • 14
1
vote
1 answer

To get the Username and Password from LTPA token for Filenet-P8 CE Connection

We have a Custom developed application and I want to make a Connection with Filenet-P8 using Java API's but the problem is I want to fetch the Username and pswd from LTPA token. I do not have prior exp. with LTPA so I don't know how to achieve…
tiktok
  • 279
  • 2
  • 23
1
vote
1 answer

LTPA Authentication with Worklight

I'm trying to migrate away from AdapterAuthentication to use LTPA deferring the userRegistry to the Websphere container. I’ve followed the Getting Started configuration here, Stack Overflow here. I believe option 2 is the right approach from this…
kwv
  • 85
  • 1
  • 6
1
vote
1 answer

Websphere : Start server with Authentication failed when using LTPA. The exception is

From last 2 days I am struggling with below error in my local windows7 machine, I have IBM WebSphere Application Server - Express 6.1.0.27 installed in my local where I deployed my application successfully, while starting the server everything works…
name_doesnt_matters
  • 789
  • 2
  • 12
  • 34
1
vote
1 answer

IBM DataPower LTPA

Can I generate the LTPA2 Token Key without the need for any of IBM products like IBM WebSphere Application Server? I'm trying to use datapower to generate LTPA token (based on authenticating user by username and password) and then reply back to the…
the_crazy
  • 11
  • 2
1
vote
1 answer

How to verify the signature of an LTPA 1 token

Does anyone know how to verify the signature part of a decrypted LTPA token? I have the keys exported from my WPE8 server, and properly decoded the LTPA token so I see the user data, expiration and signature.
kh34
  • 181
  • 1
  • 3
  • 11
1
vote
1 answer

LTPA token propagation from App to Adapter to final service

I'm trying to use and understand the use of LTPA security in worklight and the propagation of the LTPA cookie. I'm able to authenticate agains the WAS and using a sniffer I can see that worklight returns me the LtpaToken2 cookie but when I invoke…
Jxadro
  • 1,497
  • 2
  • 16
  • 36
1
vote
2 answers

How to propage WebSphere security tokens when calling HTTP from EJB

I have an EJB which makes a call to another server in the cell using HTTP (REST api). At the EJB context the user is already authenticated and authorized, how can I propagate the security tokens to the other server avoiding the need to provide…
Aviram Segal
  • 10,962
  • 3
  • 39
  • 52
1 2
3
4 5 6