Hitachi

uCosminexus Application Server Security Management Guide


5.9 Implementation of user authentication based on the integrated user management framework

The integrated user management framework is the framework that implements user authentication in integrated user management. It provides JAAS-based user authentication as the Cosminexus standard login modules. The integrated user management framework facilitates implementation of user authentication without specially developed authentication modules.

The integrated user management framework uses API to implement user authentication. It can also use the tag library that facilitates the implementation of user authentication. When API or the tag library is used to implement user authentication, a servlet or JSP is used to call the login module to perform user authentication. The invoked login module performs authentication and then logs out.

When authentication modules other than the Cosminexus standard login modules are used, they should be created as custom login modules. To learn more about the types of login modules and the login process flow, see 5.2.3 Overview of Java Authentication and Authorization Service (JAAS)-based user authentication and 5.2.6 Integrated user management process flow.

The following sections describe how API and the tag library are used to implement user authentication and the method used to create custom login modules.

Reference note

Cosminexus provides the sample program used to check the operations of the integrated user management framework. Follow the operation procedures stored in the following file.

Cosminexus installation directory\manager\examples\ua\index.html