You can develop a custom TAI as a Liberty profile feature
by implementing the com.ibm.wsspi.security.tai.TrustAssociationInterceptor interface provided in the Liberty profile server and creating a
product extension.
About this task
For a general view of custom TAI, see Developing a custom TAI for the Liberty profile.
For more information
about product extensions, see Liberty profile: Product extension.
Avoid trouble: If you have multiple
TAIs, you can configure all of them by using either the user feature
or the shared library. Do not mix the two TAI configurations.
Procedure
- Implement the custom TAI. For more information, see Developing a custom TAI for the Liberty profile.
- Convert the implementation class into an OSGi service. You can do the conversion in one of the following ways:
- Package the custom TAI as an OSGi bundle and export the
custom TAI service. For information on creating an OSGi bundle, see Creating an OSGi service bundle.
- Create a feature manifest to include the OSGi bundle. For
more information about feature manifest file, see Liberty feature manifest files.
- After the feature is installed into the user product extension
location, configure the server.xml file with
the feature name. For example:
<featureManager>
...
<feature>usr:customTaiSample-1.0</feature>
</featureManager>