1.3 Network Requirements

In addition to the servers on which Access Manager software is installed, your network environment must meet the following requirements:

  • An LDAP directory (eDirectory, Sun ONE, Active Directory, or Azure Active Directory) that contains your system users. Identity Server uses the LDAP directory to authenticate users to the system.

    NOTE:Azure Active Directory is supported when Access Manager is deployed on Microsoft Azure.

  • Web servers with content or applications that need protection and single-sign on.

  • Static IP addresses for each machine used for Access Manager components. If the IP address of the machine changes, Access Manager components installed on that machine will not start.

  • A domain name server, which resolves DNS names to IP addresses and which has reverse lookups enabled.

    Access Manager devices know each other by their IP addresses, and some requests require them to match an IP address with the device's DNS name. Without reverse lookups enabled, these requests fail. In particular, Identity Servers perform reverse lookups to their user stores. If reverse lookups are not available, host table entries can be used.

  • Time must be synchronized to within one minute among all components of the configuration using NTP or similar solution.

    IMPORTANT:If time is not synchronized, users cannot authenticate and access resources.

  • (OPTIONAL) An L4 switch or similar solution if you are planning to configure load balancing.

  • Clients with an Internet browser.