■Anew policy condition AuthenticateToRealmCondition added, to enforce the user is
authenticatedto a specic realm.
■Anew policy condition LDAPFilterCondition is added, to enforce the user matches the
speciedldap lter.
■Supportfor one level wild card compare to facilitate protecting the contents of the directory
withoutprotecting sub-directory.
■Policiescan be created in subrealms without explicit referral policies from parent realm if
organizationalias referral is enabled in global policy conguration.
■AuthLevelConditioncan specify the realm name in addition to authentication level.
■AuthSchemeConditioncan specify the realm name in addition to authentication module
name.
ServiceManagement module
■Supportfor storing Service Management/Policy conguration in Active Directory
AccessManager SDK
■SupportAPIs for authenticating users to a default Identity Repository framework database
WebServices support
■LibertyID-WSF SOAP provider: Authentication provider that encapsulates the Liberty
ID-WSFSOAP binding as implemented by Access Manager. This consists of a client and
serviceprovider.
■HTTPlayer SSO provider: HttpServlet layer authentication provider that encapsulates
server-sideAccess Manager-based SSO
Installationmodule
■RepackagingAccess Manager as J2EE Application resulting in a single WAR le to become
webdeployable
■Supportfor 64-bit SJS Web Server 7.0 - to support the 64-bit JVM
Delegationmodule
■Supportfor grouping of delegation privileges
Upgrade
■Supportsupgrade to Access Manager 7.1 from the following versions: Access Manager 7.0
2005Q4,Access Manager 6.3 2005Q1, and Identity Server 6.2 2004Q2.
Logging
■Supportfor delegation in logging module - controlling which Identities are authorized to
writeto or read from the log les.
What’sNewin This Release
SunJavaSystem Access Manager 7.1 Release Notes 9