The Security Token Service is provided with all versions of Talend ESBFor Talend ESB, the security service is, by default, managed by the Talend Identity and Access Management, based on Apache Syncope. The use of the JAAS is also possible, within Talend ESB, by switching the module used from Talend Identity and Access Management to JAAS.
You are able to either use the Talend Identity and Access Management or
the JAAS security management systems. To switch between those two systems, you have to
change the loginModule
value in the
<TalendRuntimePath>/container/etc/org.talend.esb.sts.server.cfg
configuration file:
- To use Talend Identity and Access Management, set the parameter as follows:
loginModule=TIDM
. You also need to set thetidmServiceUrl
,tidmUsername
, andtidmPassword
properties in the configuration file. For more information about how to install the Talend Identity and Access Management, see Installing and configuring Talend Identity and Access Management. - To use JAAS, set the parameter as follows:
loginModule=JAAS
.
This way, when executing the tesb:start-sts
command, Talend Runtime Container checks
which module is used and then installs either the tesb-sts or the tesb-sts-tidm feature. If
the loginModule
property does not exist, by default, tesb-sts-tidm will be installed.
To switch from one security management system to the other, simply use the following commands:
-
tesb:switch-sts-jaas
If the Security Token Service is not started yet, this command only changes the configuration file property to
loginModule=JAAS
.If the Security Token Service using the Talend Identity and Access Management is started, this command stops it and starts the JAAS module instead.
-
tesb:switch-sts-tidm
If the Security Token Service is not started yet, this command only changes the configuration file property to
loginModule=TIDM
.If the Security Token Service using the JAAS module is started, this command stops it and starts the Talend Identity and Access Management instead.