Authentication

From Giews

Authentication is proving that you are whom you are saying you are. For GWS name and password is used for authentication. Authentication can centralized or decentralized or something in between. Authentication can be done by LDAP or a relational database. LDAP is a protocol and mostly implemented by a hierarchical database. Furher on their are again frameworks which can help to organize authentication.

Contents 1 Options low level 2 Options medium level 3 Question 4 Decision 5 Argumentation

[edit] Options low level

• LDAP
• relational database

[edit] Options medium level

• Acegi (part of Spring)

[edit] Question

• Authentication is defined as entering your name and password? Or is entering your name enough to be authenticated?

[edit] Decision

Relational database with Acegis.

[edit] Argumentation

There are no requirements for higher authentication mechanisms other than username/password. Introducing LDAP would introduce a new technology within the project that is already loaded with new technologies. Of course Acegis is also a new technology but it is very much in line with Spring, which is already chosen.