Security and authentication

IBM Spectrum LSF Application Center supports the following authentication:

Password File
NIS
LDAP
AD (Windows Active Directory)
X.509
CA SiteMinder
Kerberos

Enabling HTTPS
When you install IBM Spectrum LSF Application Center for the first time, HTTP over SSL (HTTPS) is enabled by default. However, if you choose not to enable it (or disable it at any point), it may be enabled later. There are also additional configuration steps required for enabling HTTPS in a High Availability installation. On mobile devices using the IBM Spectrum LSF mobile client, some configuration is required to access IBM Spectrum LSF Application Center using HTTPS.
Single sign-on with Kerberos and SPNEGO authentication
The Kerberos protocol with SPNEGO (Simple and Protected GSS API Negotiation Mechanism) authentication technology provide transparent CAS authentication to browsers running on Windows running under Active Directory domain credentials. Enable single sign-on with Kerberos to allow users to log onto their Windows clients and directly access IBM Spectrum LSF Application Center without re-logging on. The process involves configuring Kerberos on the Active Directory domain controller host, configuring Kerberos on the LSF and LSF Application Center hosts, and configuring your Windows client host for Kerberos (which includes setting browsers for Kerberos access on the client).
Integration with CA SiteMinder
This section provides instructions for integrating IBM® IBM Spectrum LSF Application Center with CA SiteMinder for single sign-on authentication. The integration involves installing IBM HTTP Server (included in the IBM Spectrum LSF Application Center package) and CA SiteMinder Web agent on the same host.
Single sign-on with X.509 authentication
Platform Application Center supports client authentication with X.509 certificates, through the web browser and the Web Services API. The X.509 certificate is used to verify the identity of the Platform Application Center server when HTTPS is used from a browser. After the certificate is imported into the browser, authentication is done through X.509 and users are not prompted to log in to Platform Application Center.
Single sign-on with Security Assertion Markup Language (SAML)
You can enable single sign-on in IBM Spectrum LSF Application Center with SAML. IBM Spectrum LSF Application Center acts as a SAML service provider.

Parent topic: Administer IBM Spectrum LSF Application Center