1. Teamcenter™ Security Services SSO
Dennon Ison
Software Engineer
Template # 99-P34884K, Rev E – 3/17/08
© 2008 General Dynamics.  All Rights Reserved.

2. © 2008 General Dynamics. All Rights Reserved.
Objective
Explain how General Dynamics C4Systems implemented a no-challenge login using the Teamcenter Security Services™.
© 2008 General Dynamics.  All Rights Reserved.

3. © 2008 General Dynamics. All Rights Reserved.
Outline
The CIO Challenge
Terminology/Definitions
Teamcenter Enterprise™ Login Architecture
The Options
The Solution
Our Environment
Considerations
Questions
© 2008 General Dynamics.  All Rights Reserved.

4. © 2008 General Dynamics. All Rights Reserved.
The Challenge
Implement a non-challenge SSO solution for the Teamcenter™ suite of products.
Solution must have IT Networking acceptance/support
Solution must have IT Information Security acceptance/support
Solution must work with existing assets and resources
© 2008 General Dynamics.  All Rights Reserved.

5. © 2008 General Dynamics. All Rights Reserved.
Terminology
Authentication: Who the user really is
Authorization: What the user is allowed to do
SSO: A non-challenge login to systems after the user has been authenticated on the network domain
Teamcenter Security Services (TCSSO): Web-based application that maintains a central login for all Teamcenter applications
LdapAuth: Allow Enterprise users to login with their network login account
© 2008 General Dynamics.  All Rights Reserved.

6. Login Architecture (Enterprise)
With TCSSO
With LdapAuth
Prompt for
Credentials
© 2008 General Dynamics.  All Rights Reserved.

7. © 2008 General Dynamics. All Rights Reserved.
The Options
Internet Information Services™ (IIS)
Network recommended
Quick
Need to use multiple machines to redirect
Security “disliked” the idea
Move web tier to windows
Resolve security issue
Still use IIS
Lack of windows machines
Lack of “team comfort”
JBoss™ LDAP Authentication
Limited customization
Significant setup
Lack of experience
© 2008 General Dynamics.  All Rights Reserved.

8. © 2008 General Dynamics. All Rights Reserved.
The Options
Apache™ LDAP Authentication
Limited customization
Significant setup
Lack of experience
Java Authentication and Authorization Service (JAAS)
Java based (any platform)
Web service
Customization
Changes to AD
© 2008 General Dynamics.  All Rights Reserved.

9. JCIFS (Java Common Internet File System)
The Solution
JCIFS (Java Common Internet File System) (
Validated against AD with Kerberos protocol
All “open” credentials are kept in the same “container” (jvm)
Works on any platform
Should work on any J2EE java application server
Only handled authentication of user, did not give Teamcenter Credentials
© 2008 General Dynamics.  All Rights Reserved.

10. © 2008 General Dynamics. All Rights Reserved.
The Solution
Configure Security Services
Add JCIFS Filter to web.xml
Modify PreLoginPage.jsp
© 2008 General Dynamics.  All Rights Reserved.

11. © 2008 General Dynamics. All Rights Reserved.
The Solution
JCIFS
Filter
© 2008 General Dynamics.  All Rights Reserved.

12. © 2008 General Dynamics. All Rights Reserved.
Our Environment
© 2008 General Dynamics.  All Rights Reserved.

13. © 2008 General Dynamics. All Rights Reserved.
Considerations
Implemented with Tc Enterprise™, Tc Engineering™, Tc Reporting and Analytics™
Only addresses web-based login (Clients, TcRA™ (backend), integrations, still use server side authorization)
Only works when logging in from windows OS machines (looking into Unix)
© 2008 General Dynamics.  All Rights Reserved.

14. © 2008 General Dynamics. All Rights Reserved.
Questions?
© 2008 General Dynamics.  All Rights Reserved.