Configuring IBM Security Access Manager for Unica products

Unprotect objects in IBM Security Access Manager as described in this procedure to enable correct functioning of your Unica products.

Procedure

  1. Use Web Portal Manager to log in to the domain as a domain administrator.
  2. Click ACL > Create ACL, complete the Name and Description fields, and click Apply.
  3. Click ACL > List ACL, and from the Manage ACLs page, click the link for your ACL policy.
  4. From the ACL Properties page, click Create, and create two entries for your ACL, as follows.
    • For the first entry, set the entry type to unauthenticated and grant Trx - Traverse, read, delete and execute permissions.
    • For the second entry, set the entry type to Any-other and grant Trx - Traverse, read, delete and execute permissions.
  5. On the ACL Properties page of the ACL, on the Attach tab, attach un-protected obejects, as required for your product installations.

    Use the complete path in IBM Security Access Manager, starting from WebSEAL.

    Table 1. Un-protected objects required for Unica products
    Product or feature Objects
    Unica Campaign
    • /WebSEAL junction/Campaign/optimize/ext_runOptimizeSession.do
    • /WebSEAL junction/Campaign/optimize/ext_optimizeSessionProgress.do
    • /WebSEAL junction/Campaign/optimize/ext_doLogout.do
    • /WebSEAL junction/Campaign/interact/flowchartEventPatterns.udo
    • /WebSEAL junction/Campaign/interact/saveFlowchartAction.udo
    • /WebSEAL junction/Campaign/interact/testRunFlowchart.udo
    • /WebSEAL junction/Campaign/interact/getProfileDataAction.udo
    • /WebSEAL junction/Campaign/interact/manageIPB.udo
    • /WebSEAL junction/Campaign/servlet/EngageUpload
    • /WebSEAL junction/Campaign/api/campaign/rest/engageimportlist/partition
    • /WebSEAL junction/Campaign/api/campaign/rest/engageimportlist/partition/schedule
    • /WebSEAL junction/Campaign/api/campaign/rest/engageimportlist/partition/channel/schedule
    • /WebSEAL junction/Campaign/interact/interactiveChannelSimulator.do
    • /WebSEAL junction/Campaign/interact/interactiveChannelOfferMapping.do
    • /WebSEAL junction/Campaign/services/CampaignServices30Service
    • /WebSEAL junction/Campaign/FlowchartNotifyScheduler
    • /WebSEAL junction/Campaign/OperationMonitor
    • /WebSEAL junction/Campaign/initOfferListResolution.udo
    • /WebSEAL junction/Campaign/getOfferListResolutionStatus.udo
    • /WebSEAL junction/Campaign/moveCampaignsSubmit.do
    • /WebSEAL junction/Campaign/interact/interactiveChannelStrategy.do
    • /WebSEAL junction/Campaign/api/interact/rest
    • /WebSEAL junction/Campaign/api/campaign/rest
    • /WebSEAL junction/Campaign/interact/flowchartRTAttrs.udo
    • /WebSEAL junction/Campaign/api/campaign/rest/ deepsearch/partition
    • /WebSEAL junction/Campaign/api/interact/rest/v2
    • /WebSEAL junction/Campaign/api/interact/rest/v2/channels?page=0&size=1000
    • /WebSEAL junction/journey/api/campaign
    • WebSEAL junction/Campaign/services/CampaignServices30Service
    • WebSEAL junction/Campaign/api/campaign/rest
    • WebSEAL junction/Campaign/FlowchartNotifyScheduler
    • WebSEAL junction/Campaign/initOfferListResolution.udo
    • WebSEAL junction/Campaign/getOfferListResolutionStatus.udo
    • WebSEAL junction/Campaign/OperationMonitor
    • WebSEAL junction/Campaign/api/campaign/rest
    • http://host:port/Campaign/api/campaign/rest/deepsearch/partition

      Replace partition with the partition name.

    The following apply when integration with Engage is implemented.

    In the following URLs, replace partition with the partition name.

    • http://host:port/Campaign/jsp/engage/engageHome.jsp
    • http://host:port/Campaign/api/campaign/rest/engage/offers
    • http://host:port/Campaign/api/campaign/rest/engage/offer
    • http://host:port/Campaign/servlet/EngageUpload
    • http://host:port/Campaign/api/campaign/rest/engageimportlist
    • http://host:port/Campaign/api/campaign/rest/engageimportlist/partition
    • http://host:port/Campaign/api/campaign/rest/engageimportlist/partition/jobid

      This URL is for checking the status of an import job. Replace jobid with your job ID.

    • http://host:port/Campaign/api/campaign/rest/engageimportlist/partition/schedule
    • http://host:port/Campaign/api/campaign/rest/engageimportlist/partition/channel/schedule

      This URL is for sending push or SMS messages. Channel is either sms or push.

    Unica Collaborate
    • WebSEAL junction/collaborate/affiniumcollaborate.jsp
    • WebSEAL junction/collaborate/services/CollaborateIntegrationServices1.0
    • WebSEAL junction/collaborate/flowchartRunNotifyServlet
    • WebSEAL junction/collaborate/js/js_messages.jsp
    • WebSEAL junction/collaborate/js/format_symbols.jsp
    • WebSEAL junction/collaborate/alertsService
    Unica Journey
    • /WebSEAL/<instance name>/<junction name>/journey/api/platformlogin
    • /WebSEAL/<instance name>/<junction name>/journey/api/datadefinitions
    • /WebSEAL/<instance name>/<junction name>/journey/api/entrysources
    • /WebSEAL/<instance name>/<junction name>/journey/api/journeys
    • /WebSEAL/<instance name>/<junction name>/journey/api/folders
    • /WebSEAL/<instance name>/<junction name>/journey/api/permissions
    • /WebSEAL/<instance name>/<junction name>/unica/api/manager/authentication/login
    • /WebSEAL/<instance name>/<junction name>/unica/api/manager/user/user-details
    • /WebSEAL/<instance name>/<junction name>/unica/api/manager/configuration/get
    • /WebSEAL/<instance name>/<junction name>/unica/api/manager/policy/roles-permissions
    • /WebSEAL/<instance name>/<junction name>/unica/api/manager/license/7
    • /WebSEAL/<instance name>/<junction name>/unica/api/manager/datasource
    • /WebSEAL/<instance name>/<junction name>/journey/api/thirdpartylogin
    Unica Deliver

    WebSEAL junction/Campaign/deliver/eventSinkServlet
    Unica Interact
    • WebSEAL junction/Campaign/interact/flowchartEventPatterns.udo
    • WebSEAL junction/Campaign/interact/saveFlowchartAction.udo
    • WebSEAL junction/Campaign/interact/testRunFlowchart.udo
    • WebSEAL junction/Campaign/interact/getProfileDataAction.udo
    • WebSEAL junction/Campaign/interact/manageIPB.udo
    • WebSEAL junction/Campaign/initOfferListResolution.udo
    • WebSEAL junction/Campaign/getOfferListResolutionStatus.udo
    • WebSEAL junction/Campaign/interactiveChannelOfferMapping.do
    • WebSEAL junction/Campaign/interactiveChannelStrategy.do
    • WebSEAL junction/Campaign/interact/interactiveChannelOfferMapping.do
    • WebSEAL junction/Campaign/FlowchartNotifyScheduler
    • WebSEAL junction/Campaign/OperationMonitor
    • WebSEAL junction/Campaign/initOfferListResolution.udo
    • WebSEAL junction/Campaign/getOfferListResolutionStatus.udo
    • WebSEAL junction/interact/servlet/InteractJSService
    • WebSEAL junction/interact/servlet/RestServlet
    • WebSEAL junction/interact/services/InteractService
    • WebSEAL junction/Campaign/api/campaign/rest
    • WebSEAL junction/Campaign/moveCampaignsSubmit.do
    • WebSEAL junction/Campaign/interact/flowchartRTAttrs.udo
    • WebSEAL junction/Campaign/interact/interactiveChannelStrategy.do
    • WebSEAL junction/Campaign/api/interact/rest
    Unica Plan
    • WebSEAL junction/plan/services
    • WebSEAL junction/plan/errorPage.jsp
    • WebSEAL junction/plan/alertsService
    • WebSEAL junction/plan/services/collabService
    • WebSEAL junction/plan/services/PlanIntegrationServices/1.0
    • WebSEAL junction/plan/affiniumplan.jsp
    • WebSEAL junction/plan/invalid_user.jsp
    • WebSEAL junction/plan/js/js_messages.jsp
    • WebSEAL junction/plan/js/format_symbols.jsp
    • WebSEAL junction/unica/servlet/AJAXProxy
    • WebSEAL junction//plan/api/plan/flowchartApproval/flowchartApproval/validate
    Unica Optimize
    • WebSEAL junction/Campaign/optimize/ext_runOptimizeSession.do
    • WebSEAL junction/Campaign/optimize/ext_optimizeSessionProgress.do
    • WebSEAL junction/Campaign/optimize/ext_doLogout.do
    IBM SPSS Modeler Advantage Enterprise Marketing Management Edition

    WebSEAL junction/unica/rest/spssUser
    Unica Platform data filters

    WebSEAL junction/unica/servlet/DataFiltering.
    Unica notifications
    • WebSEAL junction/unica/servlet/DataFiltering
    • WebSEAL junction/unica/servlet/alertAJAXProxy
    • WebSEAL junction/unica/notification/alertsCount
    Unica Scheduler

    WebSEAL junction/unica/servlet/SchedulerAPIServlet
    Enable a logout of IBM Security Access Manager when a user logs out of an Unica application
    • WebSEAL junction/unica/j_spring_security_logout
    • WebSEAL junction/unica/jsp/frameworklogout.jsp
    Unica Platform WebSEAL junctionWebSEAL junction/unica/css/access_control.css