Optionally restrict the URLs that the IBM Connections™ login page can redirect to by whitelisting allowed domains.
Before you begin
This is not a required procedure. Perform this task only if you want to restrict the domains that
the default login page redirects to.
To edit configuration files, you must use the wsadmin client; for information, see Starting the wsadmin client.
About this task
IBM Connections™ provides the ability to restrict the redirect domains when using the default login page flow. Complete this task to configure the capability to whitelist the allowed domains for the login page's redirect parameter.
In this task, you will update the LotusConnections-config.xml file. See
Editing configuration
files for general details on updating IBM Connections™ configuration files.
Procedure
-
Edit the LotusConnections-config.xml file.
Important: Be sure to leave the wsadmin session open so you can check in the updated
file.
-
Enter the following command to load the IBM® Connections
configuration file: execfile("connectionsConfig.py")
If you are prompted to
specify a service to connect to, type 1 to
select the first node in the list. Most commands can run on any node.
If the command writes or reads information to or from a file by using
a local file path, you must select the node where the file is stored.
This information is not used by the wsadmin client when you are making
configuration changes.
- Enter the following command
to check out IBM® Connections
configuration files:
LCConfigService.checkOutConfig("working_directory","cell_name")
-
Open the LotusConnections-config.xml file in a text editor.
-
Find the
<loginRedirectWhitelist enabled="false">
element.
-
Update the
<domain>admin_replace.com</domain>
element to one of your
whitelisted domains and add <domain>
elements for each additional domain that
you want to whitelist (allow redirects to).
For example:
<loginRedirectWhitelist enabled="true">
<domain>my_domain1.com</domain>
<domain>my_domain2.com</domain>
<domain>my_domain3.com</domain>
</loginRedirectWhitelist>
-
Save and close the LotusConnections-config.xml file.
-
After making changes, you must check the configuration files back in during the same wsadmin
session in which you checked them out. See Applying common configuration property changes for information about how to
save and apply your changes.
-
Synchronize the nodes using the Integrated Solutions Console for the network deployment
system.
-
Restart the WebSphere® Application Server.