SSO Social Login

[Claudio Fina]

Hi,
i am configuring an SSO use case where social login is required. I reviewed the product documentation and so based on my understanding of the Oauth flow it seems that both the user agent(browser) and CA Access Gateway should be exposed over internet in order to complete the flow. It also seems that Policy Server never contact directly the facebbook server and so no internet connection is required for policy server.Is the above right in terms of network flow?
Moreover the customer is asking if CA Access Gateway can be configured to use a proxy, and if yes how to achieve that configuration.
I know that java class can be configured to use proxy but do not know if CA Access Gateway support that configuration
Best Regards
Claudio

[Miguel Angel Rincon]

I have the same doubt.
I'm trying to configure it in proxyserver.sh with no luck:

SPS_TOMCAT_OPTS="-Dcatalina.base=${TOMCAT_HOME} -Dcatalina.home=${TOMCAT_HOME} -Djava.io.tmpdir=${TOMCAT_HOME}/temp -DHTTPClient.log.mask=0 -DH
TTPClient.Modules=HTTPClient.RetryModule|org.tigris.noodle.NoodleCookieModule|HTTPClient.DefaultModule -Dlogger.properties=${TOMCAT_HOME}/prope
rties/logger.properties -Djava.endorsed.dirs=${TOMCAT_HOME}/endorsed $STS_AGENT_LOG_CONFIG_FILE -Dfile.encoding=UTF8 -Dhttp.proxyHost=X.X.X.X -Dhttp.proxyPort=8080 -DIWACONFIGHOME=$IWACONFIGHOME_STS"

How can we configure Access Gateway to use an http proxy?

Best Regards.