ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzamy_5.4.0.1/50/sec/secswam.htm

25 lines
1.4 KiB
HTML
Raw Normal View History

2024-04-02 14:02:31 +00:00
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<META http-equiv="Content-Type" content="text/html; charset=utf-8">
<LINK rel="stylesheet" type="text/css" href="../../../rzahg/ic.css">
<title>Simple WebSphere Authentication Mechanism</title>
</head>
<BODY>
<!-- Java sync-link -->
<SCRIPT LANGUAGE="Javascript" SRC="../../../rzahg/synch.js" TYPE="text/javascript"></SCRIPT>
<h5><a name="secswam"></a>Simple WebSphere Authentication Mechanism</h5>
<p>The SWAM authentication mechanism is intended for simple, non-distributed, single application server runtime environments. The single application server restriction is due to the fact that SWAM does not support forwardable credentials. This means that if an object in one application server process invokes a method on an object that resides in a second process, the identity of the caller in the first process is not transmitted to the second process. What is transmitted is an unauthenticated credential, which, depending on the security permissions configured on the methods, may cause authorization failures.</p>
<p>Because SWAM is intended for a single application server process, single-sign-on (SSO) is not supported.</p>
<p>The SWAM authentication mechanism is suitable for simple environments, software development environments, or other environments that do not require a distributed security solution.</p>
</body>
</html>