The OpenPortal WSRP project is consumed or integrated into the OpenPortal project,
Here is a note on some of the integration that was done.
Java Persistence API based (JPA) based datastore :
Added a new datastore for storing WSRP Producer and WSRP Consumer related configurations
The file based datastore that OpenPortal WSRP Project is unacceptable as the configurations
stored in file would be local to specific portal server node.
The JPA based WSRP datastore implementation by default uses derby as backend to store all the
WSRP Producer and Consumer related configuration information.
Note : The source code for this resides in the OpenPortal WSRP Project as this can be used
outside of the OpenPortal. Watch this space for more details on how to use it in OpenPortal WSRP
The OpenPortal project customizes the user datastore of the OpenPortal WSRP Project, its
provides user store where WSRP users are created and managed on to the LDAP server that
is used by the OpenPortal installation.
OpenPortal project creates creates people container under organizational units for each consumer
registration The people container is used for creating phantom users that are specific to a
Note : Pls see the other entries on WSRP User Identity Propagation to know more about phantom users
and identity propagation techniques
Role Management :
OpenPortal uses roles in LDAP/Access Manager to store explicitly cloned portlets.
Explicit clones are portlet clones that are created by consumers that needs to be shared by
all the users. Hence the cloned portlet is stored on to the role and all users under that
consumer registration are assigned to this role, which makes the portlet clone available to
all the users under this consumer registration.
Here is a simple representation, the WSRP Producer and WSRP Consumer stores configuration onto a database. The WSRP Producer uses the AM /LDAP server to create users and roles for the above mentioned functionalities.
Single SignOn Token(SSOToken) Identity Propagation:
OpenPortal uses AccessManager(AM) to authenticate users, authenticated users are represented by a Single SignOn Token(SSOToken) in AM. Since SSOToken is used only in OpenPortal, the SSO identity propagation is added as an extension by the OpenPortal Project to WSRP Project.
When this option is selected the SSOToken associated with the user is
propagated as an UserContext extension by the WSRP Consumer to the WSRP Producer which represents
Note : This identity propagation mechanism assumes that both Consumer and Producer Portal are OpenPortal installations. Pls see this entry for more details
WSRP Mbeans :
The OpenPortal WSRP Project Mbeans are consumed by the OpenPortal and integrated into the
OpenPortal Portal Administration Server (PAS) module, the WSRP Mbeans are deployed on to the Common Agent Container for APG and Orion/Common Agent Container (CACAO/CAC) management server. The
OpenPortal administrative console (psconsole) provides a user interface for WSRP administrative
purposes using the above Mbeans.
Note: Pls see the architecture here and the intent of this design.
WebService Single Sign On (WSSSO) Portlet :
The OpenPortal project provides a portlet/user-interface that allows users to add/provide Single
SignOn information in the form of a username and password. This portlet stores the user credentials that is used by the WSRP Consumer to
create a OASIS Username Token profile and propagate the user identity to the WSRP Producer portal.
Note : The WSSSO Portlet uses the SSOAdapter infrastructure to store user credentails, Pls see here
for more information on SSO Adapter.