Integrate an open source, Java-based authentication component into a Web portal
Tutorial Details:
How many of you have had to implement your own authentication mechanism -- usually some simple database lookup? How often have you stopped to think about the workflow needed for creating and managing user accounts? This is a common task in any development project. If you are lucky, your organization already possesses some common classes or libraries you can use. But it is often a task that is overlooked -- seen as trivial, something that occurs only in the background.
In general, a coherent authentication strategy or a solid authentication framework is missing. Over time this leads to a proliferation of applications, each of which comes with their own authentication needs and user repositories. At one time or another, everyone needs to remember multiple usernames and passwords to access different applications on a network. This poses a huge cost for the administration and support departments -- accounts must be set up in each application for each employee, users forget their passwords, and so on.
Authentication is a horizontal requirement across multiple applications, platforms, and infrastructures. In general, there\'s no reason why user Mary should need multiple usernames. Ideally she should only need to identify herself once and then be provided with access to all authorized network resources.
The objective of SSO is to allow users access to all applications from one logon. It provides a unified mechanism to manage the authentication of users and implement business rules determining user access to applications and data.
Before I get into the technical details of single sign-on, take a quick look at some of the benefits and some of the risks. Benefits include the following:
Read
Tutorial at: Click here to view the tutorial
Rate Tutorial: Build and implement a single sign-on solution
View Tutorial: Build and implement a single sign-on solution
Related
Tutorials:
 Signed and delivered: An
introduction to security and authentication -
JavaWorld -
December 1998
Signed and delivered: An
introduction to security and authentication -
JavaWorld -
December 1998
|
Java Tip 68: Learn how to implement the Command pattern in Java - JavaWorld - February 1999
Java Tip 68: Learn how to implement the Command pattern in Java - JavaWorld - February 1999
|
How to easily reconfigure your applications -- while
they're running - JavaWorld - April
1999
How to easily reconfigure your applications -- while
they're running - JavaWorld - April
1999
|
Java makes the most of XML's extensibility - JavaWorld July
1999
Java makes the most of XML's extensibility - JavaWorld July
1999
|
Java Tip 74: Build
dynamically
extensible frameworks - JavaWorld
Java Tip 74: Build
dynamically
extensible frameworks - JavaWorld
|
Manage distributed
sessions - JavaWorld April
2001
Manage distributed
sessions - JavaWorld April
2001
|
The Jxta solution to P2P
The Jxta solution to P2P
|
Java security evolution
and concepts, Part 5
Java security evolution
and concepts, Part 5
|
Generate JavaBean classes dynamically with XSLT
Generate JavaBean classes dynamically with XSLT
|
US Department of Energy signs on to J2EE
US Department of Energy signs on to J2EE
|
Effort on the
edge, Part 1
Effort on the
edge, Part 1
|
Sort it
out
Sort it
out
|
Develop Java
portlets
Develop Java
portlets
|
The first taste of Liberty
The first taste of Liberty
|
Nice
widget
Nice
widget
|
Application Integration: Sun Java System Access Manager 2004Q2 and JDBC Authentication Module
Today, most user authentication solutions for Web applications are ad hoc and are based on proprietary schema definitions in relational databases. So, if you have multiple Web applications, you may have a separate user database for each of your applicatio
|
Java Open Single Sign-On Project (JOSSO)
JOSSO, or Java Open Single Sign-On, is an open source J2EE-based SSO infrastructure aimed to provide a solution for centralized platform neutral user authentication.
|
Producing Enterprise Architecture:
A Conversation with Sun's Dan Hushon, Part Two In the final part of a two-part interview, Sun Microsystems' Dan Hushon talks about adaptive enterprise architectures, the market for developers, Java Centers of Excellence, and loosely coupled components.
|
Sun Java System Access Manager Activities with Actuate Enterprise Reporting Platform:
An Integration Story This paper describes the procedure for integrating Actuate 7 with Sun Java System Access Manager to generate reports that reflect the activities on Access Manager. Also discussed are enhancements and workarounds for known bugs.
|
Integrating Java Open Single Sign-On in Pluto
This article shows how to integrate Java Open Single Sign-On in Apache\'s Pluto portlet container.
|
|
|
|
