3.2. Modify Security Settings

Several security settings on IBM WebSphere 8 need to be changed and/or confirmed to be in place for the Business Central application to work on WebSphere 8. The following settings enable the container managed authentication mechanisms provided by the WebSphere server.
  1. In WebSphere 8 administrative console, click on Security --> Global Security. Ensure that the option Enable Application security is checked. This may already be checked and overridden at the server level.
  2. Click on Custom properties and then New to enter a new custom property with the following details: Name: com.ibm.ws.security.web.logoutOnHTTPSessionExpire and Value:true. This property instructs the server to invalidate LTPA tokens on session invalidation, thereby making the logout process consistent across multiple users using the same browser.
    Click Apply and then OK.
  3. Next, click on Users and Groups --> Manage Groups and create 2 new groups: admin, and analyst.

    Note

    Add the kie-server group as well if you will install the Realtime Decision Server. Also add the REST API groups if you will use API. For further information about API roles, refer to Chapter 17. Remote API.
  4. Click on Users and Groups --> Manage Users and create a user (for example: business-central-admin) and assign it to the admin user group that was created in the previous step.
    Note that you should not create users with usernames that are identical to group names. For example, do not create a user with the username of admin.

    Note

    You may assign this user to any of the groups you have just created. In the actual production systems, you are likely to create separate users for separate groups that align with business roles. The admin group is all encompassing and is therefore useful for the purposes of this setup. Also note that users who need access to the REST API need to be also assigned to appropriate REST API roles.

  5. Setup session management custom settings

    Next, click on Servers --> Server Types --> WebSphere Application Servers in your WebSphere administrative console and then select the server on which you are deploying Business Central.
  6. Click on Session management --> Custom properties. Click NEW.
  7. In the settings page, enter InvalidateOnUnauthorizedSessionRequestException and set its value to true.
  8. Click Apply and then OK.