intra-mart Accel Platform / Setup Guide

Version 12 2014-08-01

«  5.3.3.8. In case automatic log-in function is used   ::   Contents   ::   5.3.3.10. iAP-iWP SSO Linkage (IM-HybridSSO)  »

5.3.3.9. External Menu Linkage

Set connection destination information to do external menu linkage of intra-mart Accel Platform.

Warning

External menu linkage can be used from 2013 Spring(Climbing).

5.3.3.9.1. What is External Menu Linkage?

External Menu Linkage is a function to display menu information from multiple Menu Provider as one menu for use on intra-mart Accel Platform when the system is built by using SingleSignOn (hereafter called SSO).
Menu information thus obtained will be displayed on the global navigation of theme, tree menu and site map.
User code of intra-mart Accel Platform log-in user and that of menu provider must be the same.

5.3.3.9.1.1. What is Menu Provider?

Web application at connection destination which obtains menu information is called a menu provider.
In the external manu linkage function, menu information is to be obtained from the menu provider by using SOAP Web service.
Web service module should be installed in menu provider in advance.
Please refer to [ Web Service Module ] for Web service module.

5.3.3.9.1.2. What is Menu Client?

Web application which obtains menu information from menu providers and integrates them into one menu information for display is called a menu client.
By accessing intra-mart Accel Platform which operates as menu client, users can use multiple Web application services without worrying where they are loaded.
../../_images/configuration_file_menu_provider.png

Figure External Menu Linkage

Warning

If you use external menu linkage function, it is recommended to do SSO authentication on each application server to be linked.
If you use external menu linkage function without using SSO, following limitations will occur.
  • Automatic log-in cannot be made even though you access the menu obtained from the menu provider.
    Error page will be displayed if there is authority setting on the corresponding page.
    You can transition from the error page to the log-in screen for log-in, but you may not log-in properly depending on the browser setting or envirionment.
    If the menu provider is intra-mart Accel Platform, the control will be in place to suppress the display of global navigation. However, this control will not work when you access without logging in, and the global navigation of menu client and that of menu provider are both displayed.
  • Since you log-in to menu client and menu provider separately, it is not guaranteed that they are the same user.
    Menu information to be obtained by external menu linkage is the information that is associated with the user who has logged-in to the menu client.
    It is difficult to judge on the screen if the log-in to menu provider is made by another user, and so incorrect operation might be performed.
  • Even though you log-out from the menu client, you will not be automatically logged-out from menu provider side.
    Access can be made while you logged-in by accessing menu provider directly.

5.3.3.9.1.3. IM-HybridSSO

IM-HybridSSO is available as simple SSO function for intra-mart WebPlatform from 2014 Summer(Honoka).
Please refer to [ iAP-iWP SSO Linkage (IM-HybridSSO) ] for IM-HybridSSO.
In IM-HybridSSO, individual patch module is provided to use in intra-mart WebPlatform v7.2 patch7.
In individual patch module, defect corrections related to external menu linkage which will be provided in patch 8 are inluded in addition to IM-HybridSSO functions.
Please refer to readme.txt which will be attached in individual patch module for the bug contents.

5.3.3.9.3. Information can be obtained from Menu Provider

Following information can be obtained from menu provider.

5.3.3.9.4. Web Service Module

Following modules are the Web service provided by Intramart.
  • External Menu Linkage Service for intra-mart Accel Platform
  • External Menu Linkage Service for intra-mart WebPlatform v7.2

5.3.3.9.4.1. External Menu Linkage Service for intra-mart Accel Platform

External menu linkage service for intra-mart Accel Platform is an option module.
Select [Additional Function]-[Function for Web Service]-[External Menu Linkage Web Service] module in IM-Juggling and create war.
If proxy server is used, base URL should be set for menu information generation.
Base URL setting uses intra-mart Accel Platform common setting. Please refer to [Base URL] chapter.
Authorization setting should be done to enable Web service module.
Please create new user for Web service connection and give execution permission to the following resources by authorization setting. (Authority may also be given to the existing user.)
Please set the same authority to 2 resources below.

  • Resource Type : Web Service

  • Resource Group/Resource Name :

    1. External Menu Linkage/External Menu Information Obtaining
    2. External Menu Linkage/External Menu Information Obtaining (Administration)
Following information will be provided to the system administrator of menu client.
End Point for Web Service Connection
Please see below format.
http://<HOST>:<PORT>/<CONTEXT_PATH>/services/MenuService
User Code for Web Service Connection It is a user code of user who is authorized.
User Password for Web Service Connection It is a password of user who is authorized.

5.3.3.9.4.2. External Menu Linkage Service for intra-mart WebPlatform v7.2

External Menu Linkage Service for WebPlatform v7.2 is provided from patch6.
Function to set display sequence of external menu in menu client is provided in patch7.
In order to use the External Menu Linkage, you should use the latest patch.
If proxy server is used, base URL should be set for menu information generation.
Following settings are used in this module. Please add them if there is no setting.

  • Configuration File : <%Install Path of ServerManager% /conf/parameter.xml>

  • Setting Contents :

    <param>
   <param-name>im.web_server.url</param-name>
   <param-value>http://<accessible host name>:<PORT></param-value>
</param>
Web service access setting should be done by log-in group administrator to enable Web service module.
Please create a role for Web service connection and new user who has the role and give execution permission to the following Web service by Web service access setting. (Authority may also be given to the existing user.)
Same authority should be set to the following 2 operations.

  • Web Service Name : MenuService

  • Operation Name :

    1. getAvailableMenuTree
    2. getManagedMenuTree (provided in patch7 or later.)
Following information are provided to the system administrator of menu client.
End Point for Web Service Connection
Please see the format below.
http://<HOST>:<PORT>/<CONTEXT_PATH>/services/MenuService
Web Service Connection Destination Log-in Group ID It is a log-in group ID that obtains menu information.
User Code for Web Service Connection It is a user code of user who is authorized.
User Password for Web Service Connection It is a user password of user who is authorized.

Warning

In intra-mart WebPlatform v7.2 patch6, display sequence of external menu cannot be set.
If intra-mart WebPlatform v7.2 patch6 is used, please do not set [editable] option to the configuration file of menu client.

Note

If you click intra-mart WebPlatform link from intra-mart Accel Platform menu, log-in to intra-mart WebPlatform will not be performed automatically.
For automatic log-in, SSO product support is separately required.
Function to realize SSO simply (IM-HybridSSO) is available from 2014 Summer(Honoka).
If you use IM-HybridSSO, please refer to [ iAP-iWP SSO Linkage (IM-HybridSSO) ].
IM-SecureSignOn for Accel Platform(hereafter called IM-SSO) is SSO product that supports intra-mart Accel Platform.
In patch6 or later of intra-mart WebPlatform, if IM-SSO is used, function to allow automatic log-in from the external menu linkage menu is provided. After the installation of IM-SSO, please do the following setting to enable this function.
Please modify <%Install Path of ApplicationRuntime% /doc/imart/WEB-INF/web.xml>.
(You need to add the setting correctly immediately after the setting of HTTPContextHandlingFilter. If the setting location is not correct, it does not work properly.)
<filter>
    <filter-name>HTTPContextHandlingFilter</filter-name>
    <filter-class>jp.co.intra_mart.common.aid.jsdk.javax.servlet.filter.HTTPContextHandlingFilter</filter-class>
</filter>
<!-- ↓↓↓ Add below -->
<filter>
    <filter-name>AutoLoginFilter</filter-name>
    <filter-class>jp.co.intra_mart.foundation.security.filter.AutoLoginFilter</filter-class>
</filter>
<!-- ↑↑↑ until here -->

  ：

<filter-mapping>
    <filter-name>HTTPContextHandlingFilter</filter-name>
    <servlet-name>MenuServlet</servlet-name>
</filter-mapping>
<!-- ↓↓↓ Add below -->
<filter-mapping>
    <filter-name>AutoLoginFilter</filter-name>
    <servlet-name>MenuServlet</servlet-name>
</filter-mapping>
<!-- ↑↑↑ Until here -->
With the settings above, automatic log-in is performed by reading Cookie information that is set in VANADIS® Login Server when accessing Menu URL (〜.menu).
If Cookie information is set, general user cannot log-in/out on intra-mart WebPlatform.
Please do not fail to execute log-in/out on VANADIS® Login Server.

«  5.3.3.8. In case automatic log-in function is used   ::   Contents   ::   5.3.3.10. iAP-iWP SSO Linkage (IM-HybridSSO)  »

Copyright © 2012 NTT DATA INTRAMART CORPORATION