Two of the most important functions of any Access Management product are Authentication (login) and Authorization (Access Control). Although many forms of Authentication exist, username and password is the most common. This generally involves checking the user-supplied values against some repository, such as an LDAP directory, Windows NT domain or relational database. Authorization is making the decision whether to grant a request. Usually this involves considerations of the attributes of the user making the request, but modern, policy-based systems can consider a variety of other factors, such as the date and time, network information and application-specific controls.
AssureAccess is access management software that provides application security for Java-based Web, Portal and Web Services applications. Its security services include authentication, single-sign-on, authorization, audit and security policy administration. Organizations that develop applications using Java technology and J2EE application servers will realize shorter and more predictable application deployment schedules, and much lower security integration costs through the use of AssureAccess
You will need to register at the host site to download and view this document.
Did you find this white paper useful?
27 out of 50 users found this white paper useful
Related white papers
Gene Kim Presents "Surviving and Benefiting from an Audit" with Craig Morgan, Partner KPMG
An audit is a necessary and often painful event for many companies. As difficult as it is to imagine, it is possible to benefit from an audit. By understanding the...
Baseline Security Analyzer
The Microsoft Baseline Security Analyzer (MBSA) is a tool that allows users to scan one or more Windows-based computers for common security misconfigurations. MBSA will scan a Windows-based computer and...
Developing Effective Security policies
Security measures are most effective when they arise from well-designed, comprehensive, broadly communicated organizational policies and are enforced by human engagement as well as technical solutions. This article discusses the...
Implementing Application Security Using the .NET Framework (Part 2 of 3) (Level 200)
This presentation specifically addresses Authentication in the context of secure application development. After an overview of the costs of inadequate security and the benefits of developing secure applications, this presentation...
An Overview to Security for the Application Development Lifecycle
The current approaches to securing applications fall short of their desired goals because they do not address or improve the daily activities of architects, developers or QA engineers. Symantec leverages...
PTC ProjectLink on the Internet, a Security Tutorial
PTC ProjectLink is a Web based workspace that enables geographically and organizationally dispersed project teams to work on design projects. Deploying ProjectLink over the Internet can increase the security...
Rush to Release: Deploying Secure Applications
Security testing your applications in QA reduces development cycles and the downtime caused by defects in production. Hear experts from Mercury Interactive and Sanctum Inc. discuss ways to deploy your...
