Oracle WebLogic Server 11g Administration Handbook

Oracle Platform Security Services

In multitiered environments, security must be implemented at various levels, such as authenticating requests at the user interface level and providing secure access to databases by the application server. Externalizing security by taking it out of applications lets you centrally manage security, and to modify it you don't have to modify or redeploy applications. Java SE and Java EE do provide server security application programming interfaces and libraries, including Java Authentication and Authorization Service (JAAS). However, these security APIs and libraries are too low level for application developers, they lack management tools, and they don't address the life cycle of an application.

OPSS provides developers ...