Steps to Configure the Cross Domain Security Between WebLogic Server Domains

Cross Domain Security establishes trust between domains such that principals in a Subject from one WebLogic Server domain can make calls in another domain.

WebLogic Server establishes a security role for cross-domain users, and uses the WebLogic Credential Mapping security provider in each domain to store the credentials to be used by the cross-domain users.  

Configuration and use of cross-domain security is described in the following sections:

• Configuring Cross-Domain Security
• Configuring Cross-Domain User
• Configure a Credential Mapping for Cross-Domain Security

Configuring Cross-Domain Security

1. If you have not already done so, in the Change Center of the Administration Console, click "Lock & Edit"

2. In the left pane, click on the domain name.

3. In the right pane, Select Security > General tab.

4. Check the Cross Domain Security Enabled.

5. Click Save and in the Change Center of the Administration Console, click "Activate Changes".
 

Configuring Cross-Domain User

1. In the left pane, click on the security realms

 

2. In the right pane, click on myrealm

3. Add new user "cross-domain" under Users and Groups > Users tab.

 

4. Click on the "cross-domain" user to add this user to "CrossDomainConnectors" group and click on Groups tab. Move the "CrossDomainConnectors" from available list to chosen list.

5. Click Save to save all the changes for "cross-domain" user.

Configuring Credential Mapping for Cross-Domain Security

1. In the left pane, click on the security realms

 

2. In the right pane, click on myrealm

 

3. Click new under Credential Mappings > Default tab.

 

4. Check "User cross-domain protocol" and In the Remote Domain field, enter the name of the remote domain that needs to interact with the local domain. Click next once done.

 

5. On the Create a New Security Credential Map Entry page, enter the following.
-- Local User: User configured in the local domain if not Automatically populated.
-- Remote User: User configured in the remote domain [base_domain2] that is authorized to interact with the local domain.
-- Remote Password: The password for the remote user.

6. Click Finish.

 

That's it. Now your Cross Domain Security Between WebLogic Server Domains should be enabled. 

Please leave your valuable comments.