Security domains

As we learned earlier in the chapter, WebSphere Application Server security settings are defined in the global security section within the Administrative console. By default global security is specific to one cell and is applicable cell-wide. Since WebSphere Application Server V7, we now have the ability to define more than one security domain. Security domains allow segregation of security settings and can override a subset of the global security settings for a given domain. Domains can be used to provide customized security settings for applications and service integration buses. Each security domain is assigned a level of scope that defines where its settings are applicable. Settings that are not explicitly defined in a security domain, will default to the global security settings.

Since WAS provides a single-domain configuration by default, making administration easier for most security requirements. However, a single domain might not be the ideal configuration for certain...