6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper<?xml version="1.0" encoding="UTF-8"?>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper<!--
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper Copyright (c) 2008 Sun Microsystems, Inc. All rights reserved.
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper Use is subject to license terms.
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper Portions Copyrighted 2014 ForgeRock AS.
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper-->
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name> OpenAM J2EE Policy Agent Sample Application</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <description> An application to demonstrate the features of J2EE Policy Agents </description>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter-name>Agent</filter-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter-class>com.sun.identity.agents.filter.AmAgentFilter</filter-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </filter>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter-name>Agent</filter-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/*</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <dispatcher>REQUEST</dispatcher>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <dispatcher>INCLUDE</dispatcher>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <dispatcher>FORWARD</dispatcher>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <dispatcher>ERROR</dispatcher>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </filter-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <context-param>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <param-name>org.mortbay.jetty.servlet.SessionURL</param-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <param-value>none</param-value>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </context-param>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>ProtectedServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>ProtectedServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class>com.sun.identity.agents.sample.ProtectedServlet</servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>SecurityAwareServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>SecurityAwareServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class>com.sun.identity.agents.sample.SecurityAwareServlet</servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-role-ref>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <role-name>MANAGER_ROLE</role-name>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-link>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-link>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-role-ref>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-role-ref>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <role-name>EMPLOYEE_ROLE</role-name>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-link>id=employee,ou=group,dc=openam,dc=forgerock,dc=org</role-link>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-role-ref>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>URLPolicyServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>URLPolicyServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class>com.sun.identity.agents.sample.URLPolicyServlet</servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>ProtectedServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/protectedservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>SecurityAwareServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/securityawareservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>URLPolicyServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/urlpolicyservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <session-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <session-timeout>54</session-timeout>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </session-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <welcome-file-list>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <welcome-file>/public/welcome.html</welcome-file>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </welcome-file-list>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <error-code>403</error-code>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <location>/authentication/accessdenied.html</location>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <error-code>404</error-code>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <location>/public/notfound.html</location>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-name>Security Aware Servlet</web-resource-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/SecurityAwareServlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/securityawareservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <auth-constraint>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=employee,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </auth-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-name>Protected Servlet</web-resource-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/protectedservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <auth-constraint>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </auth-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <login-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <auth-method>FORM</auth-method>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <realm-name>Policy Agent Realm</realm-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <form-login-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <form-login-page>/authentication/login.html</form-login-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <form-error-page>/authentication/accessdenied.html</form-error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </form-login-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </login-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-role id="SR_MANAGER_ROLE">
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-role>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-role id="SR_EMPLOYEE_ROLE">
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=employee,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-role>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper</web-app>