•  Preface
  • Purpose
  • Audience
  •  Using ABL documentation
    • References to ABL compiler and run-time features
    • References to ABL data types
  • Typographical conventions
  •  Examples of syntax descriptions
    • Long syntax descriptions split across lines
    • Complex syntax descriptions with both required and optional elements
  • Example procedures
  •  OpenEdge messages
    • Obtaining more information about OpenEdge messages
•  Overview
  • Enhanced OpenEdge Database Connection Security
  • Functional overview
  • Server Management
  • Glossary of Terms
•  Configuring the OpenEdge Authentication Gateway
  • Configuration overview
  •  Configuring domains
    • Configuring domain access codes
    • Domain configuration requirements for Native Token Exchange (SSO)
    • Configuring LDAP Connections in a Security Token Service (STS)
    • Configuring policies
  • Configuring event callbacks
  • Spring Security Configuration
  • Create and deploy a certificate for HTTPS with the OpenEdge Authentication Gateway Server
  • STS server key configuration
•  Configuring your OpenEdge Database to use the OpenEdge Authentication Gateway
  • Configuring your OpenEdge database
  • SSO Token Exchange
  • STS Client Key (for database server)
  • Start OpenEdge database server
•  Reference entries
  •  ABL reference
    • SET-DB-CLIENT function (enhanced for STS)
    • SETUSERID function (enhanced for STS)
    • AUDIT-EVENT-CONTEXT attribute (enhanced for STS)
    • LOGIN-STATE attribute (enhanced for STS)
    • SEAL( ) method (enhanced for STS)
    • VALIDATE-SEAL( ) method (enhanced for STS)
    • Progress.Security.PAMStatus class (enhanced for STS)
    • AccessDenied property
    • AccessRevoked property
    • AccountDisabled property
    • AccountExpired property
    • AuthenticationAccess property
    • AuthenticationFailed property
    • Custom property
    • InvalidConfiguration property
    • LoginDenied property
    • LoginLockout property
    • MaxTries property
    • MissingCredentials property
    • PasswordExpired property
    • PermissionDenied property
    • Success property
    • UnknownUser property
  •  Startup parameters
    • Certificate store path (-certstorepath)
    • Domain (-domain) (for STS capability)
    • Key store path (-keystorepath)
    • No Host Verify (-nohostverify) (for STS capability)
    • No Session Reuse (-nosessionreuse) (for STS capability)
    • OS User (-OSUser) (for STS capability)
    • Security cache size (-secsize)
    • STS logging level (-stslogginglevel)
  •  Database utilities
    • PROUTIL DISABLEAUTHGATEWAY qualifier
    • PROUTIL ENABLEAUTHGATEWAY qualifier
    • Auditing events for OpenEdge Authentication Gateway
  •  OpenEdge Authentication Gateway utilities
    • Change the keystore password utility (changeP12pwd)
    • Data export utility
    • STS Client Utility (stsclientutil)
    •  STS Key Utility
      • stskeyutil common options
      • stskeyutil create utility
      • stskeyutil verify utility
      • stskeyutil install utility
      • stskeyutil keyfile utility
      • stskeyutil keytest utility
      • stskeyutil headertest utility
      • stskeyutil ssotest utility
    •  STS Connection Role Utility
      • stsconnroleutil status utility
      • stsconnroleutil enable utility
      • stsconnroleutil disable utility
      • stsconnroleutil list utility
      • stsconnroleutil grantuser utility
      • stsconnroleutil grantfile utility
      • stsconnroleutil revokefile utility
      • stsconnroleutil revokeuser utility
    •  STS URL Utility
      • stsurlutil list utility
      • stsurlutil status utility
      • stsurlutil update utility
    • Strong Password Encryption Utility (stspwdutil)
• ABL constructs that support theOpenEdge Authentication Gateway