User guide

Chapter 7: Developing Applications
7-4
Processing Flow
Table 7-2 provides processing flow information.
Table 7-2 Process Flow Information
Processing Flow Required? Explanation
1. Converting
CallbackHandler
to instance
Required Set login information for JAAS authentication. Use
the Cookie information set when SSO authentication
succeeded for conversion.
2. Converting
LoginContext to
instance
Required To prepare for JAAS authentication, specify the
LoginModule and CallbackHandler to be used for
JAAS authentication.
3. Calling
LoginContext
login method
Required Perform JAAS authentication processing.
Since JAAS authentication succeeded in SSO
authentication, actual authentication is not executed
for the authentication server.
4. Obtaining user
information
Required to obtain
authentication information
on an authenticated user
Obtain user information (Credential object, Principal
object).
5. Executing
authorization
Not available The JAAS authorization function cannot be used with
a servlet.
Environment Setup
Table 7-3 lists the environment setup items required for application execution.
Table 7-3 Process Flow Information for Application Execution
Setup Item Required? Explanation
Setting
environment
variable
Required Set the environment variables required for operation.
Obtaining service
ID file
Not Required This file is obtained automatically during business
server environment setup.
Creating login
configuration file
Required Create a login configuration file corresponding to the
entry name specified when converting LoginContext
to an instance.
Creating security
policy file
Not Required -
Creating
truststore file
Not Required -
Setting access
permission for
operated
resources
Required Set the access permission for the login configuration
and security policy files. For security reasons, it is
recommended that the permission settings be
minimized..
Registering Required Register the servlet as a protection resource.