Control access to SharePoint Lists using Tivoli Identity Manager

Question

We are designing a system where will use SharePoint, the customer has Tivoli Identity Manager integrated with Active Directory.

One way that we have thought of doing this is by creating an asp.net membership provider that communicates with TIM. But then how to connect roles in TIM to access to lists?

Or does anyone have a better idea of how to do this?

We are using WSS 3.0.

Answer 1

I'm pretty Microsoft-centric, so I don't know the differences between TIM and TAM, but maybe this will help. We looked into Tivoli Access Manager for Microsoft .NET last summer with the goal of using it as a secondary authentication option for users that did not have Active Directory IDs

The following was contained within the downloaded documentation:

Tivoli Access Manager Role and Membership Providers for ASP.NET

This use case differs in that it is not a single sign-on solution and therefore does not require the Tivoli Access Manager authentication module for ASP.NET, nor WebSEAL, or the Plug-in for Web Servers.

This use case exploits the Role and Membership Provider model and abstract classes introduced to the ASP.NET 2.0 framework. By making the appropriate configurations in the web.config file, an ASP.NET application is able to externalize all authentication, authorization, role and membership administration responsibilities to Tivoli Access Manager via the Tivoli Access Manager Role and Membership Providers for ASP.NET.

Furthermore, the programmatic and declarative security constructs of the .NET languages are also able to be utilized in this use case as the Principal of the HTTP request will be ‘provider aware’ and automatically query the configured role provider for authorization decisions.

In the end, we did not use it because the required changes to the server were rejected:

• Installation and configuration of the Tivoli Access Manager Runtime application.
• Addition and configuration of new 32-bit enabled web site in IIS that will call a WCF service (SharePoint 2010 is 64-bit while the Tivoli Access Manager Runtime is 32-bit, so IBM has created this service that will manage the calls between the two).
• Customization of the web.config file for the SharePoint web application.