The integrated user management framework is composed of the following two types of libraries:

• User authentication library
  This is the JAAS-supported user management library that is used to authenticate users based on the information in the user information repository built in the LDAP directory server, and it provides the authenticated user information to the application.
  
• Single sign-on library
  This is the library that is used to map users based on the user mapping information in the single sign-on information repository to implement single sign-on.
  

The following figure shows the positioning of the user authentication and single sign-on libraries.

The user authentication library can alone be used for application authentication. It also can work with the single sign-on library to authenticate mapped users.

Figure 5-23 Positioning of user authentication and single sign-on libraries