Creating and Assigning a Test Security Configuration

John creates a new security configuration to authenticate and authorize application users. John creates this security provider to test application-layer security before importing the package into the production environment.

1. Click Security Configuration in the navigation pane, then in the administration pane, click New.
2. In Create Security Configuration, name the security configuration AcmeAppSecurity, then click OK.
3. In the navigation pane, expand the Security Configuration folder and click the new security configuration node.
4. In the administration pane, click the Authentication tab then click New to add a new LDAP security provider.
5. Configure the LDAP properties.
   The AuthenticationSearchBase and RoleSearchBase properties ensure that only users and groups in the AcmeCorp organization unit are allowed access to Acme data.

   Property	Value
   BindDN	cn=Directory Manager
   BindPassword	secret
   AuthenticationSearchBase	ou=AcmeCorp,ou=users,dc=example,dc=com
   DefaultSearchBase	dc=example,dc=com
   ProviderURL	ldap://localhost:10389
   RoleMemberAttributes	uniquemember
   RoleSearchBase	ou=AcmeCorp,ou=groups,dc=example,dc=com
   AuthenticationScope	one-level
   ServerType	openldap
   RoleScope	one-level

6. Click Save.
7. In the Authentication, Authorization, and Attribution tabs, delete NoSecLoginModule, NoSecAuthorizer, and NoSecAttributer, respectively.
8. In the General tab, click Validate.
   A confirmation message displays upon success.
9. If the validation is successful, click Apply.
10. Assign the package to default domain so the package and the security configuration can be tested in the test environment.
    1. Expand the Domains folder, then click default.
    2. Click Security Configurations tab, then click Assign.
    3. Select AcmeAppSecurity.