3 Replies Latest reply on Oct 18, 2007 2:22 AM by shamoh

    Form-based authemtication

    shamoh

      Hello.

      I would like to ask if Seam supports standard container managed authentication, i.e. FORM-based authentication?

      Looking at Security capture of Seam Documentation it looks like it supports just BASIC, DIGEST and custom method authentications.

      Thanks for your answer.

      Best regards,
      Libor

        • 1. Re: Form-based authemtication
          shane.bryzak

          No, we don't support FORM based authentication at this time. Is there a particular reason you need it?

          • 2. Re: Form-based authemtication
            shamoh

            Out corporation has User Management (UM) application to manage users and roles for all company applications. There is no self-registration in single applications.

            Out application platform is IBM WebSphere 6.1 (WAS). We have implementation of custom user registry (external JACC authorization provider), which negotiates container managed authentication/authorization.

            Our applications transparently use FORM-based authentication and users are checked against UM.

            This approach ensures the Subject of logged in user contains LTPA token in its private credentials. It means I can call EJB deployed in different WAS instance and this call is trusted.

            So thera two + one reasons:
            - all applications use same user registry
            - LTPA token
            + form-based auth is "recommended" solution of out company

            -lk

            • 3. Re: Form-based authemtication
              shamoh

               

              "shane.bryzak@jboss.com" wrote:
              No, we don't support FORM based authentication at this time. Is there a particular reason you need it?


              And do you plan to support form-based authentication in future releases?

              Thanks,
              -lk