Opensource Authentication and Authorization
AbstractAs web applications become the norm for application delivery mechanisms, there is more and more demand for managing access control at the application framework level. As is immediately obvious, managing this access control becomes an overwhelming overhead for the actual application, and should be handled by the underlying framework used for application delivery. Opensource projects such as ForgeRock OpenAM, (Formerly OpenSSO) can provide both Authentication services, as well as Authorization services to applications, utilising a simple REST or SOAP based web service interface. All the management of users, groups and other authentication attributes can be handled by the AuthN/AuthZ application, and delivered to the web application as a service. We can already see this behavior in use, in PAM, or pluggable authentication modules used in many linux environments in use today. However mere authentication is not sufficient in an enterprise environment. Often, group, Community and other membership, or attributes, need to be used to determine access control. |
|
Utilizing an external Access control service, such as OpenAM, can offload much of this access control from the application, allowing the access control layer to be provided through a simple, effective Web Service permissions layer.
In this presentation I will demonstrate how the OpenAM authN and AuthZ layers can be simply and easily integrated into an enterprise application, allowing fine grained access control to be enforced at the
application layer, while allowing the administration and management of the policies to be handled by the service provider.
Speaker
 |
Do you like this talk? |
Related Presentations
Opensource Authentication and Authorization
|
|
Introduction to UMA j – User Managed Access framework
|