8.5. Distributed End-Entity Authentication

With the increasing use of distributed systems, users need to access resources that are often remote. Traditionally, users have had to sign on to multiple systems, each of which may involve different identities and authentication technologies. In contrast, with single sign-on, the user needs to authenticate only once, and the authenticated identity is securely carried across the network to access resources on behalf of the subject.

The Java 2 platform supplies rich APIs that, when used in conjunction with the authentication framework, integrate with standard distributed environments. An example in J2SE is a LoginModule implementing the Kerberos V5 protocol, com.sun.security.auth.module.Krb5LoginModule ...

Get Inside Java™ 2 Platform Security: Architecture, API Design, and Implementation, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.